When the computer incident response team (CIRT)

finds clear evidence that a hacker has penetrated the corporate network and modified customer information, an information security manager should FIRST notify:

A. the information security steering committee.

B. customers who may be impacted.

C. dataowners who may be impacted.

D. regulatory- agencies overseeing privacy.

Explanation:

The data owners should be notified first so they can take steps to determine the extent of the damage and coordinate a plan for corrective action with the computer incident response team. Other parties will be notified later as required by corporate policy and regulatory requirements.