The Chief Executive Officer (CEO) of a corporation purchased the latest mobile device and connected it to the internal network. The CEO proceeded to download sensitive financial documents through…

E-discovery is a legal process for retrieving electronic records for litigation and is not the process that governs how employees report and respond to security incidents involving lost devices.

Data handling covers how data is classified, stored, and transmitted, but the failure here was not in how data was handled before loss - it was in the failure to recognize and report the loss as a security incident.

Incident response procedures define how staff must identify, report, escalate, and document security events such as data breaches caused by lost devices containing sensitive information; the helpdesk staff lacked training on these procedures and treated the situation as a routine device replacement rather than triggering the breach notification and investigation steps required by a proper incident response plan.

Data recovery and storage refers to backup and restoration processes, which are not relevant to the failure to report a breach resulting from a physically lost device.