CompTIA CySA+ CS0-003 Practice Question
Your organization has experienced a significant data breach. As part of the incident response plan, which of the following actions should be carried out first?
Identify and classify the incident
Conduct a root cause analysis
Notify stakeholders about the breach
Eradicate the malware from the system