セキュリティ研究者は、組織の機密ユーザー データが Web サイトで販売されていることが判明したことを組織に警告しました。組織が影響を受ける関係者に通知するために使用する必要があるのは、次のうちどれですか?
正解:B
Explanation The organization should use a communications plan to inform the affected parties. A communications plan is a document that outlines how an organization will communicate with internal and external stakeholders during a crisis or incident. It should include details such as who will be responsible for communicating with different stakeholders, what channels will be used to communicate, and what messages will be communicated. An incident response plan is a document that outlines the steps an organization will take to respond to a security incident or data breach. A business continuity plan is a document that outlines how an organization will continue to operate during and after a disruption. A disaster recovery plan is a document that outlines how an organization will recover its IT infrastructure and data after a disaster.