What is a best practice when a data breach is confirmed?

• A. Block all user access immediately.
• B. Notify stakeholders and regulatory bodies as required.
• C. Publicly disclose the breach within minutes.
• D. Ignore the incident.

Answer: (B)

When a data breach is confirmed, the priority is to handle communication in a timely, lawful, and responsible way. The best practice is to notify stakeholders and regulatory bodies as required. This ensures those who could be affected know what happened and can take protective steps, while also fulfilling legal and regulatory obligations that govern breach disclosure. Following proper notification helps preserve trust, supports risk management, and aligns with how incident response plans are designed to operate. Prematurely blocking all access can unnecessarily disrupt operations, and public disclosure within minutes can spread incomplete or inaccurate details. Ignoring the incident is unacceptable because it can lead to greater harm and noncompliance.