CISM Incident Management Practice Question
Which role in the incident response team structure is responsible for coordinating all response activities and making decisions about incident severity classification?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Incident response manager
The IR manager leads the team, coordinates activities, and classifies incidents based on severity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Incident response manager
Why this is correct
The IR manager oversees the entire response and classifies the incident.
- ✗
Communications lead
Why it's wrong here
The communications lead handles messaging, not coordination or classification.
- ✗
Security analysts
Why it's wrong here
Analysts perform technical analysis but do not typically have authority to classify or coordinate.
- ✗
Forensic investigators
Why it's wrong here
Investigators focus on evidence collection and analysis, not overall coordination.
Go deeper
Related to this question
About these practice questions
This CISM question is part of Courseiva's 871-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.