Which of the following should be the FIRST step of incident response procedures?
A. Classify the event depending on severity and type.
B. Identify if there is a need for additional technical assistance.
C. Perform a risk assessment to determine the business impact.
D. Evaluate the cause of the control failure.
The Correct Answer is C. Perform a risk assessment to determine the business impact.
At first, We need to perform a risk assessment so that we will get to know what are the system functionlaities that have been affected and we try to restore them. Later, we find the type of incident and it's severity. Because, the main objective of an organization is to meet the business requirements and meet the deadlines as well.
Therefore, the answer is Option C. Perform a risk assessment to determine the business impact.