How should you respond to a data breach or potential cyber threat?

• A. Attempt to fix it yourself.
• B. Wait for someone to tell you.
• C. Ignore it.
• D. Immediately report to IT/security per incident response plan; avoid handling data directly.

Answer: (D)

Responding to a data breach or cyber threat needs a structured, coordinated action. The best move is to report it immediately to IT or security according to the incident response plan. This plan outlines who to contact, what details to provide, and the exact steps to take, ensuring a fast, controlled response rather than a reactive one.

Following the plan lets the incident response team quickly contain the issue, isolate affected systems, and preserve evidence such as logs and timestamps for investigation. It also helps prevent further data exposure and minimizes damage while the proper remediation actions are put in place. Handling data directly yourself can contaminate evidence, expose more information, or create new vulnerabilities, so you should avoid acting on the data outside the defined process.

Waiting to be told or trying to fix it yourself introduces delays and uncertainty, which can let the breach grow and complicate the investigation. By reporting right away, you enable a clear, authorized response that protects people, data, and systems.