Exam CISM topic 1 question 1040 discussion

C - Prompt communication with senior management ensures they are aware of the situation, allowing for timely decisions and appropriate actions. It is essential to keep organizational leadership informed about security incidents.

I would check the contract first to understand whether there was something about communicating the breaches with the business, before I do anything else.

D. Review the provider contract.Terminating the provider contract (Option A) might be premature without understanding the contractual obligations and the specific details of the breach. Conducting a BIA (Option B) is important but secondary to understanding the legal and contractual aspects. Informing senior management (Option C) is a crucial step but should typically follow an initial assessment and understanding of the situation based on the contract review.