During incident response, who should be notified as part of the communication step?

• A. Stakeholders
• B. Only the security team
• C. Internal IT only
• D. No notification required

Answer: (A)

During incident response, the communication step is about getting the right information to the right people so actions can be coordinated across the organization. Notifying stakeholders—such as executives, process owners, IT operations, security, legal/compliance, and, if needed, public relations or external partners—helps align decisions, mobilize resources, and meet regulatory or contractual obligations. Limiting notification to only the security team or only internal IT leaves out essential business context and can slow or misdirect the response. Without any notification, responses become uncoordinated and risks escalate. So, stakeholders should be notified as part of the communication step.