In incident response planning, what best describes escalation?

• A. Final reporting to stakeholders after closure
• B. Defined escalation paths and contact lists
• C. Emergency hardware replacement procedures
• D. Post-incident root cause analysis

Answer: (B)

Escalation is the process of moving an incident to higher levels of authority and more resources using predefined paths and contact lists. The idea is to have clear rules for who to notify, in what order, and how quickly, based on the incident’s severity. This ensures the right experts and decision-makers are involved without delays, so containment, mitigation, and coordination happen promptly. Predefined escalation paths spell out roles, timelines, and contact methods, making response consistent and accountable across the team.

Final reporting after closure, hardware replacement procedures, and post-incident root cause analysis are important parts of the broader incident lifecycle, but they occur at different stages or focus on different goals: communicating outcomes after the fact, restoring infrastructure, and learning from the event, respectively.