Certified Incident Handler (CIH) Practice Ecam

What OWASP best practice did Abel adhere to when prioritizing incidents as critical?

1. Incident Resolution

2. Triage and mitigation

3. Risk Assessment

4. Service Restoration

The correct answer is: Triage and mitigation

Abel prioritized incidents as critical by adhering to the best practice of triage and mitigation. This practice involves assessing the severity and potential impact of incidents quickly to determine which ones require immediate attention. Triage is essential in ensuring that limited resources are used effectively to address the most critical issues first, minimizing damage and reducing recovery time. In this context, focusing on triage allows Abel to identify which incidents pose the greatest risk to the organization's security and operations. This prioritization is integral to an effective incident response strategy, where timely identification and mitigation of significant threats can prevent further escalation and protect valuable assets. While other practices such as incident resolution focus on resolving incidents after they've been identified or involve processes like risk assessment to gauge potential vulnerabilities more broadly, triage and mitigation directly relate to the immediate handling of incidents based on their criticality, making it the best practice in this scenario.