Which term describes the action of creating a formalized process and incident report form for your vendor to utilize?

Which term describes the action of creating a formalized process and incident report form for your vendor to utilize?

• A. Vendor Incident Form
• B. Security Policy
• C. Device Configuration
• D. Formal Process

Answer: (C)

The action is about establishing a structured, repeatable way to handle incidents with a vendor, including the standard form they would fill out. This is the idea behind a formal process: codifying steps, responsibilities, timelines, and the required documentation so incidents are handled consistently and traceably. By creating a formal process, you ensure that both the handling of incidents and the incident report form are part of an official, repeatable workflow the vendor can follow. The other options don’t fit as well: a vendor incident form is just the document used to report incidents, not the overall workflow; a security policy is a broader set of rules and expectations; and device configuration relates to configuring hardware or software, not to incident handling procedures.