Free CompTIA CySA+ CS0-003 Practice Question

After identifying an active security breach that involves stolen customer payment information, what is the FIRST step the incident response team should take in terms of communication with law enforcement agencies?

  • Declare the incident to the appropriate organizational authorities and then reach out to law enforcement.

  • Immediately inform law enforcement to assist with the investigation.

  • Publicly announce the breach to warn other organizations before contacting law enforcement.

  • Start an internal investigation without informing law enforcement to avoid legal scrutiny.

This question's topic:
CompTIA CySA+ CS0-003 / 
Reporting and Communication
Your Score:

Check or uncheck an objective to set which questions you will receive.