A data breach is a security incident where sensitive or confidential information is accessed by an unauthorized person. What is the corresponding response called?

A data breach is a security incident where sensitive or confidential information is accessed by an unauthorized person. What is the corresponding response called?

• A. Incident reporting
• B. Forensic investigation
• C. Response to data breach
• D. Data retention policy

Answer: (C)

The main idea here is how organizations handle a security incident once it happens—the response to a data breach. This is the coordinated set of actions taken to detect, contain, eradicate, recover, and communicate about the breach, and to prevent recurrence. Calling it the response to data breach fits because it refers to the overall reaction and management of the incident, not just a single step. Incident reporting describes telling others about the breach, which is part of the process but doesn’t capture the full range of actions in responding. Forensic investigation is a specific activity within the response used to gather and analyze evidence; it’s important, but it’s one component, not the whole response. A data retention policy concerns how long data is kept and when it’s disposed of, which is unrelated to how a breach is managed once it occurs. So the term that best fits the overall action taken in response to a data breach is the response to data breach.

The main idea here is how organizations handle a security incident once it happens—the response to a data breach. This is the coordinated set of actions taken to detect, contain, eradicate, recover, and communicate about the breach, and to prevent recurrence. Calling it the response to data breach fits because it refers to the overall reaction and management of the incident, not just a single step.

Incident reporting describes telling others about the breach, which is part of the process but doesn’t capture the full range of actions in responding. Forensic investigation is a specific activity within the response used to gather and analyze evidence; it’s important, but it’s one component, not the whole response. A data retention policy concerns how long data is kept and when it’s disposed of, which is unrelated to how a breach is managed once it occurs.

So the term that best fits the overall action taken in response to a data breach is the response to data breach.