During a data breach, which role is tasked with keeping the business functioning and minimizing losses?

During a data breach, which role is tasked with keeping the business functioning and minimizing losses?

• A. Public relations team
• B. Key role of the Computer Incident Response Team (CIRT)
• C. Chief Information Security Officer
• D. IT Help Desk

Answer: (B)

In a data breach, the priority is to coordinate actions that keep essential operations running and minimize losses. That responsibility is carried by the key role of the Computer Incident Response Team. The CIRT leads the technical response, ensuring rapid containment, restoration of systems, and continuity of critical business processes. They act as the central coordinating hub, bringing together IT, security, operations, legal, and communications to make timely decisions, allocate resources, and manage communications with management, regulators, customers, and other stakeholders. They also guide the execution of recovery plans, preserve evidence for investigation, and determine when to escalate or switch to backup and failover options. While public relations, governance, and help desk have important supporting roles, they do not lead the incident response and business continuity efforts in the way the CIRT does.

In a data breach, the priority is to coordinate actions that keep essential operations running and minimize losses. That responsibility is carried by the key role of the Computer Incident Response Team. The CIRT leads the technical response, ensuring rapid containment, restoration of systems, and continuity of critical business processes. They act as the central coordinating hub, bringing together IT, security, operations, legal, and communications to make timely decisions, allocate resources, and manage communications with management, regulators, customers, and other stakeholders. They also guide the execution of recovery plans, preserve evidence for investigation, and determine when to escalate or switch to backup and failover options. While public relations, governance, and help desk have important supporting roles, they do not lead the incident response and business continuity efforts in the way the CIRT does.