Certified Incident Handler (CIH) Practice Ecam

Which of the following is NOT a goal of incident response?

1. Minimizing damage

2. Reducing recovery time

3. Financial gain from the incident

4. Dealing with employee conflicts

The correct answer is: Dealing with employee conflicts

The focus of incident response is primarily on the effective management and resolution of security incidents to protect the organization's assets, services, and reputation. Minimizing damage and reducing recovery time are critical goals of incident response, as they help organizations limit the impact and accelerate restoration to normal operations after a security event. While dealing with employee conflicts is important in a workplace setting, it does not align with the fundamental goals of incident response. Incident response aims to address and mitigate incidents in a way that minimizes harm to the organization, it does not directly address internal interpersonal issues unless they directly affect the incident or its resolution. The ultimate focus is on safeguarding the organization's interests, ensuring continuity, and preventing future incidents, rather than managing conflicts among employees or attempting to derive financial benefits from the situation. Hence, this choice stands apart as not being a primary objective of incident response strategies.