Which statement best reflects the recommended response to an incident report?

• A. Keep the information strictly within your own department with no external communication.
• B. Do nothing until it becomes a legal issue.
• C. Share findings with the organization, as appropriate, but do not take any further steps.
• D. Investigate the problem and share any findings with the organization, as appropriate, in order to help prevent it from happening in the future.

Answer: (D)

Prompt investigation and sharing of findings with the organization as appropriate are essential so an incident becomes a learning opportunity and steps are taken to prevent recurrence. The goal is to determine what happened, identify root causes or contributing factors, and document corrective actions or process improvements. By communicating findings to relevant parts of the organization, accountability is established and appropriate controls, training, or policy updates can be put in place. Acting on those findings and then sharing what was done helps everyone benefit from the lesson and reduces future risk. Keeping information siloed, ignoring the issue, or sharing findings without implementing any changes leaves the problem unresolved and invites repetition.