Which of the following is NOT a phase of Incident Management?

• A. Evaluation
• B. Prevention
• C. Preparedness
• D. Mitigation

Answer: (A)

Incidents are managed through steps that happen before, during, and after an event to prevent harm and minimize impact. Prevention and Preparedness are pre-event activities: designing safeguards, training people, and ensuring the right resources are ready. Mitigation fits into reducing damage and limiting consequences as the incident occurs and in the immediate aftermath. Evaluation, while important, is not typically listed as a formal phase of the incident management lifecycle; it’s the after-action assessment that reviews what happened and identifies lessons learned to improve future responses. So, while you’ll still analyze performance after an incident, that evaluation step isn’t considered one of the primary incident management phases.