According to ISO/IEC 27035-2, how should an organization plan the development of the incident response...

Comprehensive and Detailed Explanation From Exact Extract:

ISO/IEC 27035-2:2016 recommends that organizations should assess the necessary capabilities of the Incident Response Team (IRT) based on risk exposure and the frequency of past incidents requiring specific skills or tools. This ensures a balanced and realistic approach to resource allocation while preparing for probable future events.

Section 7.2.1 of ISO/IEC 27035-2 outlines that capability planning should consider:

Lessons learned from prior incidents

Incident history and trends

Anticipated threat landscape

Option A is incorrect because relying solely on internal capabilities may leave organizations vulnerable when specialized expertise is required. Option C contradicts ISO guidance because a lack of recent use does not mean a capability is no longer critical; it may still be required during high-impact, low-frequency incidents.