Question

During a major data breach affecting customers, a journalist calls a help-desk technician directly and asks for confirmation of the number of records exposed. The technician is aware of internal chatter about the incident. What should the incident response plan direct the technician to do?

Accepted Answer

Refer the inquiry to the designated public relations spokesperson and disclose nothing further

Answer

Provide only the confirmed record count and refer the journalist to the company website for updates

Answer

State that no breach has occurred until the investigation is complete

Answer

Answer factual questions but decline to speculate about the cause