List the core steps of incident response for a security event.

• A. Detect/assess, notify appropriate personnel, contain and control, mitigate, document, and debrief.
• B. Detect only, without notification or containment.
• C. Ignore initial indicators, escalate to public authorities only, and debrief after weeks.
• D. Report to media first, then investigate.

Answer: (A)

Incident response is a process that handles security events from first signs through recovery and learning. The best choice covers the full sequence: detect and assess the incident to understand its scope, notify the appropriate personnel so the right experts can engage, contain and control to prevent further damage, mitigate to remove or lessen the impact, document actions and findings for accountability and future reference, and debrief afterward to capture lessons learned and improve defenses. This flow ensures fast containment, proper communication, and a solid record for any forensic needs.

The other options miss essential parts or rush the response. Detecting without notifying or containing leaves the incident unmanaged and exposes the organization to greater harm. Ignoring indicators and escalating only after weeks delays the response and often makes containment much harder. Reporting to the media first can spread information prematurely and jeopardize evidence and investigation.