What is the purpose of incident reporting procedures in the DoD?

• A. To record all coffee breaks
• B. To document and respond to security incidents promptly, ensuring investigations and corrective actions
• C. To classify incidents only after a year
• D. To delay responses

Answer: (B)

Incident reporting procedures are designed to capture security incidents quickly and handle them in a systematic way so assets and information are protected. When an incident is reported, details are logged, a priority is assigned, and the right teams are alerted to begin an investigation. This rapid documentation and escalation enable containment, preservation of evidence, and a thorough root-cause analysis, leading to corrective actions that prevent recurrence. It also supports timely notifications to stakeholders and compliance with policy and regulatory requirements. Choosing options focused on unrelated activities, delaying responses, or awaiting long classifications misses the core purpose: prompt, coordinated action to detect, understand, and remediate incidents.