Who should be contacted FIRST in the event of a security breach?

A.
Forensics analysis team

B.
Internal auditors

C.
Incident response team

D.
Software vendors

Explanation:
A security breach is an incident and requires a response. The incident response team would be better equipped
to deal with any incident insofar as all their procedures are concerned. Their procedures in addressing incidents
are: Preparation; Incident identification; Escalation and notification; Mitigation steps; Lessons learned;
Reporting; Recover/reconstitution procedures; First responder; Incident isolation (Quarantine; Device removal);
Data breach; Damage and loss control.