Which steps are essential when reporting a security incident to ensure proper handling and compliance?

Which steps are essential when reporting a security incident to ensure proper handling and compliance?

• A. Delete logs
• B. Hide details
• C. Log the incident, describe what happened, collect evidence, notify privacy/compliance, escalate per policy
• D. Ignore

Answer: (C)

Reporting a security incident requires building a clear, traceable record so the situation can be investigated and remediated properly. The essential steps are to log the incident in the official system, describe what happened in detail, collect and preserve evidence (such as logs, screenshots, and relevant files) to maintain the chain of custody, notify the appropriate privacy/compliance or security teams, and escalate according to the organization’s policy to ensure timely and appropriate action. Deleting logs, concealing information, or ignoring the incident undermines forensic analysis, regulatory requirements, and accountability, and should never be done. Thorough documentation and following policy ensure both effective handling and compliance.

Reporting a security incident requires building a clear, traceable record so the situation can be investigated and remediated properly. The essential steps are to log the incident in the official system, describe what happened in detail, collect and preserve evidence (such as logs, screenshots, and relevant files) to maintain the chain of custody, notify the appropriate privacy/compliance or security teams, and escalate according to the organization’s policy to ensure timely and appropriate action. Deleting logs, concealing information, or ignoring the incident undermines forensic analysis, regulatory requirements, and accountability, and should never be done. Thorough documentation and following policy ensure both effective handling and compliance.