Which of the following is a best practice specific to planning, handling, and investigating security incidents?

Question $32$ options:

Get full management support for a computer security incident response team $($CSIRT$).$

Assess computers periodically to expose performance highs and lows.

Update old password policies.

Enable real$-$time scanning $($shield$)$ options in antivirus software.