A final IR plan should be tested at least ____________________ by performing at least a structured walk-through test and a more realistic type of...

Q2. ____________________ testing can come from standardization boards or consultants (for example, ISO 9000), certification or accreditation groups, or a group selected by the organization's management from a sister company.

Q4. In order to do an effective job, the CSIRT needs to know who it works for and what systems it should focus on; in other words, it needs to identify its ____________________.