A confirmed breach of a 311 call-center database may require notice beyond the SOC. What escalation practice is most appropriate?
Select an answer to reveal the explanation.
Short Explanation
When a 311 breach crosses the line, the SOC should not be a secret society. Escalate on criteria to leadership, legal, and maybe public communications. Personal note silos and waiting for the newspaper are bad escalation paths.
Full Explanation
Incident reporting within the management process includes predefined escalation to leadership, legal counsel, and communications when thresholds are met. Timely, role-appropriate notification supports regulatory, contractual, and public-trust obligations. Isolating knowledge with one analyst or waiting for external media disclosure is poor incident governance.