The __________________ provides the CSIRT with the authority needed to do their job. Therefore, it should be approved by the highest possible level of authority within the organization, preferably the CEO.
a. CSIRT policy
b. Incident response plan
c. Cybersecurity framework
d. Risk management plan
