Certified Incident Handler (CIH) Practice Ecam

What information is typically not included in the incident summary of a post-mortem report?

1. Personnel involved in resolution

2. Severity of the incident

3. Costs incurred due to the incident

4. Services affected by the incident

The correct answer is: Costs incurred due to the incident

The incident summary of a post-mortem report generally focuses on the technical aspects of the incident, the response taken, and the overall impact on the organization. While the report may touch upon the costs incurred as an ancillary detail, it does not typically prioritize financial implications as part of the core incident summary. The emphasis in a post-mortem is to analyze the causes and effects of the incident, along with what was done to resolve it. Information such as personnel involved in the resolution, severity of the incident, and services affected are critical to understanding the incident's impact and the appropriateness of the response. These elements help in evaluating the incident's overall significance and in providing lessons for future preparedness. In contrast, costs incurred are often considered secondary and may be documented separately, as they do not directly contribute to understanding the operational or technical outcomes of the incident. This focus allows organizations to streamline their incident response processes and improve their resilience without being overly focused on the financial aspects initially.