Real world use case
One of the organizations was breached and the CEO of the organization was speaking with the media. During this process, he spoke about various things, which he should not have told the media as it led to a bad reputation for the organization among the public. In short, he was not very well prepared on what to say and how to speak when it comes to the external or public domains.
Ideally, there should be people who must be trained to speak with the media; they must know exactly what to communicate, otherwise it might bring a negative impact within the organization. This should be part of the company-wide incident-response plan.
Use case
One of the business-critical systems that contains lot of sensitive data is behaving abnormally and is crashing due to high load. Let's look into what different people might need:
- The business needs are that the server should continue to run properly
- The security needs are that they should take a sound image so that they can investigate forensics...