Which service category provided by the incident response teams supports organ national functions such as...

Incident response team service categories typically include reactive, proactive, and security quality management services. Proactive services are designed to support organizational functions such as training, awareness, readiness, and auditing, with the aim of preventing incidents before they occur.

These services include:

Security awareness and training

Simulations and exercises

Readiness assessments

Advisory support to audits

This aligns with ISO/IEC 27001:2022’s preventive intent, particularly:

Clause 7.2 – Competence

Clause 7.3 – Awareness

Annex A A.5.35 – Independent review of information security

Reactive services (Option B) focus on incident handling after an event, while security quality management services (Option C) focus on metrics and maturity oversight.