Which of the following should the organization use to inform the affected parties?

A security researcher has alerted an organization that its sensitive user data was found for sale on a website.

Which of the following should the organization use to inform the affected parties?
A . An incident response plan
B . A communications plan
C . A business continuity plan
D . A disaster recovery plan

View Answer

Answer: B

Explanation:

A communications plan should be used to inform the affected parties about the sale of sensitive user data on a website. The communications plan should detail how the organization will handle media inquiries, how to communicate with customers, and how to respond to other interested parties.