Which ot the following should the security analyst do NEXT?

During an Incident, it Is determined that a customer database containing email addresses, first names, and last names was exfiltrated.

Which ot the following should the security analyst do NEXT?
A . Consult with the legal department for regulatory impact.
B. Encrypt the database with available tools.
C. Email the customers to inform them of the breach.
D. Follow the incident communications process.

View Answer

Answer: D

Explanation:

An incident communications process is a set of procedures that defines how to communicate with internal and external stakeholders during and after an incident, such as customers, employees, management, regulators and media. An incident communications process can help to provide accurate, timely and consistent information about the incident, its impact and the actions taken to resolve it. An incident communications process can also help to maintain trust and reputation, comply with legal obligations and prevent misinformation or confusion3.