An Organization Has Not Had an Incident for Several Months

Multiple Choice

An organization has not had an incident for several months. The Chief Information Security Officer (CISO) wants to move to a more proactive stance for security investigations. Which of the following would BEST meet that goal?

A) Root-cause analysis
B) Active response
C) Advanced antivirus
D) Information-sharing community
E) Threat hunting