Certified Incident Handler (CIH) Practice Ecam

What is the cybersecurity framework that uses a structured approach to respond to security events in an organization?

1. NIST Cybersecurity Framework

2. ITIL incident management

3. CIS security controls

4. ISO 27001

The correct answer is: ITIL incident management

The cybersecurity framework that most directly uses a structured approach to respond to security events in an organization is ITIL incident management. ITIL, or the Information Technology Infrastructure Library, provides a set of practices focused on aligning IT services with the needs of the business. In the context of incident management, ITIL emphasizes the systematic handling of incidents to restore normal service operation as quickly as possible, minimizing the adverse impact on the business. ITIL incident management includes defined processes for identifying, logging, categorizing, prioritizing, diagnosing, and resolving incidents. This structured approach helps organizations achieve consistent responses to incidents, track performance metrics, and continuously improve their incident handling capabilities. In contrast, while the NIST Cybersecurity Framework provides guidelines for improving cybersecurity risk management practices, it is broader and encompasses more than just incident response. The CIS security controls outline best practices for securing IT systems but do not function as a dedicated incident response framework. ISO 27001 is a standard for establishing, implementing, maintaining, and continually improving an information security management system (ISMS), and while it addresses security management comprehensively, it does not specifically focus on incident response in a structured manner like ITIL does.