DRI Incident Response and Emergency Operations

Question 1

What is the PRIMARY purpose of an Incident Response Plan (IRP)?

Accepted Answer

To provide a structured framework for detecting, responding to, and recovering from incidents in a controlled and coordinated manner

Answer

To assign financial liability for losses incurred during incidents

Answer

To document lessons learned after incidents for regulatory reporting

Answer

To ensure all incidents are reported to law enforcement immediately

Question 2

In the Incident Command System (ICS), what is the role of the 'Incident Commander (IC)'?

Accepted Answer

To have overall authority and responsibility for managing the incident response

Answer

To manage financial resources and approve all expenditures during the incident

Answer

To communicate with external media and government agencies

Answer

To coordinate technical recovery activities for IT systems

Question 3

What is an 'Emergency Operations Center (EOC)' and how is it activated?

Accepted Answer

A designated command and coordination hub activated when an incident exceeds routine management capabilities and requires coordinated multi-functional response

Answer

A permanent facility that monitors all organizational risks and is always active

Answer

A virtual system for remote employees to coordinate during any significant event

Answer

An offsite location where recovery teams work after a facility loss

Question 4

During an incident, what is the purpose of maintaining an 'incident log'?

Accepted Answer

To document all significant actions, decisions, communications, and resource deployments throughout the incident for accountability and after-action analysis

Answer

To track employee attendance during the response

Answer

To record financial expenditures for insurance reimbursement claims

Answer

To satisfy real-time regulatory reporting requirements

Question 5

What is the 'span of control' principle in the Incident Command System?

Accepted Answer

The principle that one supervisor should manage no more than 3-7 subordinates for effective coordination

Answer

The geographic area under the Incident Commander's jurisdiction

Answer

The limit on financial authority delegated to field commanders

Answer

The maximum number of incidents that can be managed simultaneously

Question 6

Which phase of incident response focuses on returning business operations to normal while preserving evidence for investigation?

Accepted Answer

Recovery phase

Answer

Containment phase

Answer

Eradication phase

Answer

Post-incident analysis phase