Exam CFR-310 topic 1 question 81 discussion

A. Notifying law enforcement C. Notifying a national computer emergency response team (CERT) or cybersecurity incident response team (CSIRT) Incorrect Responses: B. Notifying the media: Media involvement is usually handled later, after understanding the full scope of the incident, not as an immediate step. D. Notifying the relevant vendor: While vendors may need to be contacted eventually (e.g., for software support), they are not the first point of contact in a critical incident. E. Notifying a mitigation expert: This may be useful but is not the most immediate action compared to informing law enforcement and CERT/CSIRT.