Problem Statement
Your vendor has had a breach that may impact your data. Which action is most appropriate?
Explanation
In case of a vendor breach, it’s essential to treat it as a potential incident affecting your organisation: activate incident-response procedures, assess impact on your data and systems, collaborate with the vendor to review their controls and contract obligations, and determine remediation steps. Ignoring or reacting prematurely without analysis can increase risk or liability.
Practice Sets
This question appears in the following practice sets:
