To whom should an information security incident be reported?
A . It should not be reported at all and it is better to resolve it internally
B . Human resources and Legal Department
C . It should be reported according to the incident reporting & handling policy
D . Chief Information Security Officer
Answer: C