Law enforcement has contacted a corporation’s legal counsel because correlated data from a breach shows the organization as the common denominator from all indicators of compromise. An employee overhears the conversation between legal counsel and law enforcement, and then posts a comment about it on social media.
The media then starts contacting other employees about the breach. Which of the following steps should be taken to prevent further disclosure of information about the breach?
A.
Security awareness about incident communication channels
B.
Request all employees verbally commit to an NDA about the breach
C.
Temporarily disable employee access to social media
D.
Law enforcement meeting with employees