Which of the following groups is BEST positioned to consult on a communication plan directed towards satisfying a regulatory requirement when an incident occurs?

Question

Options

• AHead of the incident response team
• BSenior management
• CInformation security manager
• DLegal personnel

• A
  11% (4)
• B
  3% (1)
• C
  5% (2)
• D
  82% (31)

Explanation

Legal personnel are best positioned to consult on regulatory compliance communication because they understand the specific legal obligations, disclosure timelines, and liability implications that govern what must be communicated, to whom, and when - getting this wrong can expose the organization to fines or lawsuits.

The Head of the incident response team (A) focuses on technical containment and recovery, not regulatory interpretation. The Information security manager (C) understands the technical incident details but lacks the legal expertise to interpret compliance obligations. Senior management (B) makes final decisions but relies on legal counsel to advise them on regulatory requirements before communicating externally.

Memory tip: When you see the words "regulatory requirement" in a question, think legal first - regulations are laws, and lawyers interpret laws.

No community discussion yet for this question.