Certified Incident Handler (CIH) Practice Ecam

Which OWASP best practice focuses on incident classification, prioritization, and specific task assignments?

1. Incident Response Planning

2. Incident Handling

3. Triage and mitigation

4. Post-Incident Activity

The correct answer is: Triage and mitigation

The focus of incident classification, prioritization, and specific task assignments aligns closely with the principles of triage and mitigation. In the context of incident handling, triage refers to the process of evaluating and categorizing incidents to determine their severity and urgency. This is crucial for effectively managing resources and responding appropriately to various types of security incidents. Triage allows teams to prioritize incidents based on their potential impact on the organization, ensuring that the most critical issues are addressed first. Specific task assignments are also an essential part of this process, as they ensure that the right team members are engaged in the response efforts, each according to their skills and the demands of the situation. While incident response planning, incident handling, and post-incident activities are important aspects of managing security incidents, they do not specifically emphasize the immediate classification and prioritization of incidents in the way that triage and mitigation do. The emphasis on quick assessment and structured response in triage is what sets it apart as the best practice that directly addresses the classification, prioritization, and task assignment necessary for effective incident management.