Sarah Chen is a Level 1 SOC analyst at Centex Healthcare. The SOC detected a potential data breach involving unauthorized access to patient records. Multiple departments need constant updates: Legal n

Question

Options

• AIncident coordinator
• BPublic relations manager
• CIncident manager
• DInformation security officer

• A
  93% (37)
• B
  5% (2)
• C
  3% (1)

Explanation

An incident coordinator is the role most directly responsible for orchestrating communications among stakeholders during an incident. In SOC operations, complex incidents require structured updates to ensure legal, HR, leadership, IT, and external partners (such as an MSSP) receive timely, accurate, and role-appropriate information without overloading technical responders. The coordinator manages the communication cadence (status calls, written updates), ensures action items are tracked, and keeps information consistent across teams. The incident manager typically owns overall incident command and decision-making, but the coordinator role is specifically focused on coordination and communication flow-acting as the central hub. A public relations manager handles external communications and media, which is not the primary need described. An information security officer is a leadership/governance role and may be involved in oversight, but they do not usually run day-to-day incident comms coordination. In healthcare, where HIPAA implications can introduce strict notification and documentation requirements, having a dedicated incident coordinator helps maintain disciplined communication, reduces confusion, supports compliance evidence, and allows technical responders to focus on containment and investigation.

No community discussion yet for this question.