If an organization detects and confirms a breach in system security, its next step should be to collect as much information as it can about the intrusion.

Question

Quizplus · Accepted Answer

After detecting and confirming a breach in system security, the organization should collect as much information as possible about the intrusion such as how it happened, what data was affected, who was involved, and what actions were taken. This information can then be used to contain the breach, mitigate any damage, and prevent future incidents.

If an Organization Detects and Confirms a Breach in System