1 / 1 pts Why is escalation part of the detection and analysis phase of an incident response ? occurred and that investigation continues . Depending on the nature of the incident as understood thus far , management may need to take additional action .,Management and leadership need to know that an information security incident may have,It will require additional resources , such as IT staff , to begin carrying out the next phases of the response plan , and this would require management approval and action .,This is required by NIST SP800 - 61 Rev. 2 and in regulations that apply to the particular business or organization .,Most organizations are unwilling to delegate authority to an incident response team leader and thus need to control every action in order to exercise due diligence