A breach tabletop drill shows unclear ownership for external communications and evidence preservation. What should governance strengthen with security and legal?
Select an answer to reveal the explanation.
Short Explanation
Drills that end with “who calls whom?” are doing you a favor—fix it now. Pre-name who speaks externally and who preserves evidence so the real night is not a scramble.
Full Explanation
Incident readiness requires clear role assignment among data governance, security, legal, and communications. Ambiguity during drills predicts failure in live events. Joint playbooks should specify who preserves forensic evidence, who approves external messages, and how escalation works.