Which of the following would normally not be part of an incident response policy?
a. Outside agencies (that require status)
b. Outside experts (to resolve the incident)
c. Contingency plans
d. Evidence collection procedures
Answer: C
A contingency plan wouldn't normally be part of an incident response policy. It would be part of a disaster-recovery plan.