Which practice ensures that time-based obligations remain on track after an incident?

• A. Immediate termination of all systems
• B. Delaying remediation until full budget approval
• C. Post-incident reviews, evidence submission, and compliance verification
• D. Publishing public statements

Answer: (C)

The main concept is that after an incident, a structured post-incident process is essential to keep time-based obligations on track by reviewing what happened, gathering and submitting evidence, and verifying compliance within required timelines. Post-incident reviews help determine whether response actions met defined time windows, while collecting evidence and confirming compliance ensures there’s documentation to support timely reporting, restoration, and notifications. This approach creates accountability, supports audits, and guides any needed corrective actions to prevent future timing gaps.

Immediate termination of all systems would be overly disruptive and not a standard or targeted way to maintain timing obligations. Delaying remediation until full budget approval would risk missing deadlines tied to time-based requirements. Publishing public statements addresses communication but does not ensure that internal time-based obligations are tracked, evidenced, or verified.