Certified Incident Handler (CIH) Practice Ecam

In an incident post-mortem report, what section summarizes the incident's details, including affected services and personnel involved?

1. Incident summary

2. Response timeline

3. Root cause analysis

4. Impact analysis

The correct answer is: Incident summary

The incident summary section of a post-mortem report serves as an overarching overview of the incident. It succinctly encapsulates the critical details, providing a clear understanding of what transpired during the incident. This section typically includes essential information such as the time and date of the incident, the systems and services affected, a brief description of the incident itself, and the personnel involved in managing and responding to it. This summary is pivotal as it lays the groundwork for the rest of the report, offering readers a snapshot that helps contextualize the detailed analyses that follow. By summarizing the incident at the outset, the report becomes more accessible to stakeholders who may not require the extensive granularity provided in later sections.