Which of the following actions is an early step when triggering an Information Security Incident...

According to the NIST Computer Security Incident Handling Guide1, one of the first steps in responding to an incident is to identify the scope, nature, and source of the incident. This involves gathering evidence, analyzing logs, interviewing witnesses, and performing forensic analysis. The goal is to determine the extent of the compromise, the type of attack, the identity or location of the attacker, and the potential impact on the organization and its stakeholders. This step is essential for containing the incident, mitigating the damage, and preventing further escalation or recurrence. References:

NIST Computer Security Incident Handling Guide1, Section 3.2.2 Identification

Cisco What Is an Incident Response Plan for IT?2, Section 2. Respond

CrowdStrike Incident Response [Beginner’s Guide]3, Section 3. Incident Response Steps