D is correct. "and all major incidents—often require a temporary team to work together to identify the resolution. This team may include representatives of many stakeholders, including the service provider, suppliers, users, and others."

Investigating a major incident usually requires a team of representatives from many stakeholder groups. Major incidents are significant disruptions or outages that have a severe impact on the business or users. Due to their critical nature, they often require a coordinated effort from various stakeholders, including IT teams, service owners, business representatives, and other relevant parties. This collaborative approach ensures that the incident is properly analyzed, appropriate actions are taken, and effective communication is maintained throughout the incident resolution process. By involving representatives from different stakeholder groups, the investigation can benefit from diverse perspectives and expertise, leading to a more comprehensive understanding and resolution of the incident.

correct answer is D

B is correct.

This is where swarming comes in incident management

D - usually for gathering people from different teams.

D is correct

D is correct.

The Answer is D

Why it is not 'B'- Authorizing an emergency change'? Could anyone help to explain?