In incident response, Reporting is defined as

• A. The process of scheduling tasks for investigators
• B. The formal written documentation
• C. The graphical depiction of evidence
• D. The live monitoring during an incident

Answer: (B)

In incident response, reporting is the formal written documentation of what happened, when it happened, who was involved, the impact, and the actions taken to contain, eradicate, and recover from the incident. A good incident report records the timeline, decisions made, communications, and the evidence collected (with chain of custody) so there is a clear, auditable trail for stakeholders, legal or regulatory requirements, and post-incident analysis. This written record supports accountability, helps management understand the incident, and provides a solid foundation for lessons learned and future improvements.

Scheduling tasks is about planning and assigning work, which is more about operational workflow. Graphical depiction of evidence refers to visualizations like timelines or diagrams to illustrate relationships, not the formal narrative. Live monitoring during an incident is real-time observation and detection activity, not the formal documentation that records what occurred and what was done.