A company had developed an incident response plan 18 months ago. Regular implementations of the response plan are carried out. No changes have been made to the response plan since its creation. Which of the following is the right statement about the plan?

Answer options:

A.It places too much emphasis on the already implemented security controls, and the plan needs to be changed immediately.
B.The response plan is not implemented on a regular basis. Ideally, it should be implemented every week.
C.The response plan does not cater to new services as the plan is not updated for 18 months.
D.The response plan follows the best practices recommended by AWS. No change is required.

Answer: C
Option A is incorrect because we do not know this for a fact.
Option B is incorrect because the question confirms the response plan has been carried out on a regular basis.
Option C is CORRECT because AWS keeps on changing and adding new services. Since the existing plan was last updated 18 months ago, we know for a fact that it would not cater to these new services.
Option D is incorrect because the plan does not fully follow the best practices since it is not updated for 18 months.
For more information on the incident response plan, kindly visit the following URL:
https://aws.amazon.com/blogs/publicsector/building-a-cloud-specific-incident-response-plan/