What is the proper sequence for responding to a data breach in VASAP?

• A. Notify affected parties as required, and handle post-incident communications.
• B. Post details publicly to ensure transparency.
• C. Contain exposure, notify supervisor and security, document incident, inform affected parties as required, and implement corrective actions.
• D. Ignore the incident unless penalties occur.

Answer: (C)

Responding to a data breach follows a disciplined sequence aimed at limiting harm and meeting required obligations. Begin by containing the exposure to stop further data loss; this is the immediate priority. Next, escalate and inform the right people—typically your supervisor and the security or incident response team—to coordinate the response. Then, document the incident in detail so there is an accurate record of what happened, what data was affected, and what actions were taken. After documentation, inform affected parties as required by policy or law, providing clear guidance on what they should expect and any steps they should take. Finally, implement corrective actions to address root causes, strengthen controls, and prevent recurrence. Public posting isn’t automatic or always appropriate; transparency should follow established reporting requirements and internal policy rather than ad hoc disclosures. This sequence ensures containment, proper escalation, accountability, appropriate disclosure, and lasting improvements.