• Question 45
Those services undertaken to prepare the organization or the CSIRT constituents to protect and secure systems in anticipation of problems, attacks, or other events are called ____.
• Question 46
The ____ flow of information needed from the CSIRT to organizational and IT / InfoSec management is a critical communication requirement.
• Question 47
The champion for the CSIRT may be the same person as the champion for the entire IR function— typically, the ____.
• Question 48
A key step in the ____ approach to incident response is to discover the identify of the intruder while documenting his or her activity.
• Question 49