A user has received an email from an external source which asks for details on the company’s
new product line set for release in one month. The user has a detailed spec sheet but it is marked
“Internal Proprietary Information”. Which of the following should the user do NEXT?

A.
Contact their manager and request guidance on how to best move forward

B.
Contact the help desk and/or incident response team to determine next steps

C.
Provide the requestor with the email information since it will be released soon anyway

D.
Reply back to the requestor to gain their contact information and call them

Explanation:
This is an incident that has to be responded to by the person who discovered it- in this case the
user. An incident is any attempt to violate a security policy, a successful penetration, a
compromise of a system, or any unauthorized access to information. It’s important that an incident
response policy establish at least the following items:
Outside agencies that should be contacted or notified in case of an incident
Resources used to deal with an incident
Procedures to gather and secure evidence
List of information that should be collected about an incident
Outside experts who can be used to address issues if needed
Policies and guidelines regarding how to handle an incident

Since the spec sheet has been marked Internal Proprietary Information the user should refer the
incident to the incident response team.