Following a data breach, an organization must communicate the incident to its customers. Which of the following approaches to customer communication is the BEST to ensure clear, timely, and appropriate disclosure?
Scheduling individual phone calls with customers to provide a thorough rundown of the data breach in technical jargon.
A minimal disclosure citing an 'investigation into irregular activity' to avoid alarming customers, with a general reassurance of ongoing security measures.
A statement prepared for customers that outlines the nature of the breach, its potential impact on them, and the measures the organization is taking to remedy the situation and prevent future incidents.
An immediate, detailed broadcast message to all customers explaining the technical specifics of the breach and all areas of vulnerability discovered.