Free CompTIA CySA+ CS0-003 Practice Question
During an ongoing investigation of a security breach, it is determined that sensitive customer data has been illegally accessed and exfiltrated by an external party. As part of the incident response team, you are tasked with the responsibility of communicating with law enforcement. What information should you prioritize in your initial report to the authorities to aid their investigation effectively?
A comprehensive root cause analysis outlining potential internal faults
An executive summary of the incident, highlighting who, what, when, where, and why details
A detailed compilation of evidence such as logs and disk images
Metrics such as mean time to detect and respond to the incident
This question's topic:
CompTIA CySA+ CS0-003 /
Reporting and Communication
SAVE $49