An incident response plan that has never been practiced usually fails in a real incident: contact lists are out of date, people do not know their roles, and critical decisions have no owner. Exercises test plans, train people and reveal gaps in a safe setting. Security+ covers the main types of exercise, from simple discussion to full simulations, and asks you to choose the right one for a goal and a budget. The same exercise types are used for incident response, business continuity and disaster recovery plans.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.