Management of Information Security 3rd Edition by Michael Whitman ,Herbert Mattord

Exercise 4

Iris was a little unsure of what to do next. She had just left the meeting with the other executives of RWW, Inc. At the meeting they confirmed the need for action on the matter of the critical information offered for sale on a public auction site. That was the last point of agreement. This was a risk they had simply not planned for and they were completely unprepared.
Just before the meeting broke up, they had made assignments to various people in the meeting. Robin, the CEO, was going to contact the members of the board of directors to brief them so that if the story became public, they would not be surprised. Jerry, the corporate counsel, was going to start an intensive effort to discover what peer companies had done in situations like this. Mike, the CIO, was assigned to contact the auction site to get the auction shut down and lay the groundwork for working with whatever authorities were brought in for the criminal aspects of the case.
Iris was assigned to investigate which law enforcement agency should be involved in the investigation. She reached for her business card box and began thumbing through the contacts she had.
Do you think the response of the company so far indicates any errors in the matter of this incident?