NISTNIST CSFRespond FunctionEASYFree question
Which stakeholders should typically be included in incident response communications?
- A.Internal teams, management, legal, and potentially external parties like law enforcement
- B.External auditors, contracted vendors, and the marketing team, with internal management left out entirely of the loop
- C.The IT department, the help desk, and rotating on-call engineers, excluding legal or executive stakeholders
- D.The CEO and the board of directors, notified informally after resolution
Why A is correct
Effective incident response requires communication with a range of stakeholders including internal teams, management, legal counsel, and when appropriate, external entities such as law enforcement or regulators.
Know someone studying for NIST CSF? Send them this one.