CompTIA CySA+ CS0-003 Practice Question
After identifying a security breach that resulted in the loss of customer data but was contained before widespread system damage, which of the following is the most appropriate initial communication step?
Immediately notify public relations to prepare a press release.
Directly contact law enforcement to handle the public notification.
Reach out to upper management before taking any actions.
Consult the incident response plan for specific communication protocols.