問題文
A mid-sized organization considers building every capability in-house instead of engaging external incident response and assessment services. What does the external option provide that is hardest to build internally?
選択肢
- A guarantee that no incident will occur.
- Experience drawn from many organizations' incidents, and specialists available immediately without having to be employed and kept busy year round.
- Knowledge of the organization's own environment, which an external team accumulates faster than internal staff because it examines many environments and therefore recognizes the local one more quickly than the people who operate it every day.
- Ownership of the decision to notify regulators, since a team that has handled many incidents is better placed to judge when a disclosure is required.