CompTIA Cloud Essentials+ (CLO-002) — Question 41

A project manager is interested in the notification process a CSP follows after discovering a breach of customer data. Which of the following is MOST likely to provide the necessary information?

Answer options

• A. Communication plans
• B. Incident response policy
• C. Service level agreement
• D. Access controls

Correct answer: B

Explanation

The Incident response policy outlines the procedures a CSP follows when a data breach occurs, including notification processes. Communication plans may provide general strategies for communication but are not specific to breach notifications. Service level agreements focus on performance expectations, while access controls relate to security measures rather than notification protocols.