A city SOC wants to avoid improvising during the next water-utility incident. Which investment best reflects the preparation phase of IR?
Select an answer to reveal the explanation.
Short Explanation
Preparation is packing the go-bag before the storm, not shopping for flashlights in the dark. Contacts, tools, and playbooks ready ahead of time mean the water-utility IR team is not inventing roles under pressure. Waiting until confirmation to name a commander is the opposite of being prepared.
Full Explanation
Preparation precedes detection and response actions. Effective preparation includes communication trees, tooling, and documented playbooks so municipal responders can execute consistently. Reactive wipes, post-recovery messaging, or delaying command assignment address later phases or communications, not readiness before an incident occurs.