CompTIA CySA+ CS0-003 Practice Question
Following a data breach, an organization must communicate the incident to its customers. Which of the following approaches to customer communication is the BEST to ensure clear, timely, and appropriate disclosure?
A statement prepared for customers that outlines the nature of the breach, its potential impact on them, and the measures the organization is taking to remedy the situation and prevent future incidents.
Scheduling individual phone calls with customers to provide a thorough rundown of the data breach in technical jargon.
An immediate, detailed broadcast message to all customers explaining the technical specifics of the breach and all areas of vulnerability discovered.
A minimal disclosure citing an 'investigation into irregular activity' to avoid alarming customers, with a general reassurance of ongoing security measures.