Which component is responsible for informing internal and external stakeholders about the incident and response status?

• A. Detection
• B. Communication
• C. Containment
• D. Eradication

Answer: (B)

Effective communication about the incident and the response status is what the communication component handles. It ensures timely, accurate updates to internal teams and external stakeholders—such as management, IT staff, users, customers, partners, and regulators—about what happened, how severe it is, and what steps are being taken. This includes initial notifications, ongoing status updates, and post-incident follow-ups. Clear communication helps coordinate actions, set expectations, support decision-making, and meet legal or contractual obligations. The other components focus on detecting the incident, containing its spread, or removing the threat; they don’t primarily manage stakeholder updates. A solid communications plan, defined roles, and established channels ensure the right people receive timely and accurate information.