CompTIA CySA+ (CS0-003) — Question 262

A company is in the middle of an incident, and customer data has been breached. Which of the following should the company contact first?

Answer options

• A. Media
• B. Public relations
• C. Law enforcement
• D. Legal

Correct answer: D

Explanation

The correct answer is D, Legal, because contacting legal counsel first ensures the company understands its obligations and rights regarding the data breach. Other options, like media or public relations, are secondary to ensuring compliance and protection from legal repercussions. Law enforcement may also be involved later, but legal advice is crucial at the outset.