CompTIA CySA+ CS0-003 Practice Question
During an ongoing investigation of a security breach, it is determined that sensitive customer data has been illegally accessed and exfiltrated by an external party. As part of the incident response team, you are tasked with the responsibility of communicating with law enforcement. What information should you prioritize in your initial report to the authorities to aid their investigation effectively?
Metrics such as mean time to detect and respond to the incident
An executive summary of the incident, highlighting who, what, when, where, and why details
A detailed compilation of evidence such as logs and disk images
A comprehensive root cause analysis outlining potential internal faults