Exam 712-50 topic 1 question 30 discussion

B. The data owner The data owner is responsible for the data and is the primary stakeholder in terms of understanding the sensitivity and importance of the data. Informing the data owner promptly allows them to take appropriate actions, such as initiating an incident response, assessing the impact, and making decisions regarding further notifications and mitigation steps. The data owner can then coordinate with other relevant parties, such as internal audit, executive staff, and government regulators, if necessary.

for me a major incident and a data breach, i would certainly get executive staff onboard

If we do not pick "All executive staff" it will compromise the question integrity.

Who is being notified about such breach must be defined in the security inc. man process. Stolen DB information implies a security breach meaning inc can be treated as major. Exec team must get notification for all major inc. especially for the security ones