Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise, you discover that data has been breached and that the repository of stolen data is on a server located in a foreign country. Your team now has full access to the data on the foreign server. What action should you take FIRST?

Question

Quizplus · Accepted Answer

Consulting with other executives to develop an action plan is the first step in responding to a data breach. This will help to ensure that all stakeholders are aware of the situation and that a coordinated response is developed.

Scenario: Your Corporate Systems Have Been Under Constant Probing and Attack