Question
A data breach occurs at a company. Which of the following actions should be taken?
- A. Make an announcement on social media so customers are aware as soon as possible.
- B. Tell the company management team and then tell regulatory agencies. Correct
- C. Keep the incident a secret until the issue is resolved.
- D. Inform the entire IT sector, but ask for discretion.
Explanation
After a breach, the incident is escalated through the company's internal chain first, so management can activate the incident response plan, and then reported to the regulatory agencies that breach notification laws require. Announcing it on social media first skips the response plan and may release unverified details. Keeping it secret violates notification obligations, and telling the whole IT sector is neither required nor appropriate.
