Question: Your incident response team is unable to contain an incident because they lack authority to take action without management approval. Which critical step in the preparation phase did your team skip?

  1. From an incident response committee to oversee any incidents that may occur.
  2. Get preauthorized to take unilateral action and make or direct emergency changes.
  3. Bring management in as leadership on the incident response team.
  4. Assign a head of the emergency response team who has the correct authority

Answer: The correct answer of the above question is Option B:Get preauthorized to take unilateral action and make or direct emergency changes.