CompTIA CySA+ (CS0-002) — Question 404

An incident response team detected malicious software that could have gained access to credit card data. The incident response team was able to mitigate significant damage and implement corrective actions. By having incident response mechanisms in place, which of the following should be notified for lessons learned?

Answer options

• A. The human resources department
• B. Customers
• C. Company leadership
• D. The legal team

Correct answer: C

Explanation

Notifying company leadership is crucial as they are responsible for strategic decision-making and resource allocation. While customers and the legal team may also need to be informed, the leadership must be aware of the incident's implications for future prevention and response. The human resources department is less relevant in this context.