The First Notification for Incident Response Procedures

C.

The escalation process in critical situations should involve the information security manager as the first contact so that appropriate escalation steps are invoked as necessary.

Choices A, B and D would be notified accordingly.

When developing incident response procedures involving servers hosting critical applications, the FIRST to be notified should be the Information security manager.

Here's why:

Incident response procedures are an essential component of an organization's security program. They are designed to ensure that the organization is prepared to detect, contain, and respond to security incidents effectively. The incident response team is responsible for implementing the incident response procedures, and they need to know who to contact when an incident occurs.

In this scenario, the incident involves servers hosting critical applications. Critical applications are applications that are essential to the organization's business operations, and their availability is critical to maintaining business continuity. Therefore, any incident that affects these applications can have a significant impact on the organization's operations.

The Information security manager is responsible for overseeing the organization's security program, including incident response. They are responsible for ensuring that the incident response team is properly trained and equipped to handle security incidents. They are also responsible for coordinating with other departments, such as business management and operations, to ensure that the incident response procedures are effective and that the organization is adequately prepared to respond to incidents.

Therefore, the Information security manager should be the FIRST to be notified when an incident occurs involving servers hosting critical applications. Once the Information security manager has been notified, they can initiate the incident response procedures, which may involve contacting other departments, such as business management and operations, as necessary.

In conclusion, the correct answer to this question is C. Information security manager.