What is the role of a designated spokesperson during a security incident?

• A. To provide timely, accurate updates through approved channels while protecting privacy
• B. Withhold all information
• C. Publish rumors
• D. Blame external parties

Answer: (A)

During a security incident, the designated spokesperson serves as the central conduit for information, ensuring updates are timely and accurate and released through approved channels while safeguarding privacy and sensitive data. This approach helps maintain trust, provides a clear understanding of the incident status and response actions, and keeps messages consistent across all audiences. It also coordinates with legal, security leadership, and communications teams to balance transparency with privacy and regulatory obligations. Other approaches—sharing information without approval, spreading rumors, or blaming others—undermine credibility, create confusion, and can worsen the situation.