An incident response team is responding to a breach of multiple systems that contain PII and PHI.
Disclosing the incident to external entities should be based on:
A . the responder’s discretion
B . the public relations policy
C . the communication plan
D . senior management’s guidance
Answer: A