What is the purpose of an incident communication plan?

• A. Delay notifications to stakeholders until after containment
• B. Limit communications to internal teams only
• C. Provide generic updates without regulator input
• D. Timely, accurate notification to stakeholders, regulators, and customers; reduces confusion and risk

Answer: (D)

A plan for incident communication focuses on how information is shared during a disruption. It defines who communicates, what information is shared, when updates occur, and through which channels. Its purpose is to provide timely, accurate notification to stakeholders, regulators, and customers, which helps reduce confusion and risk during an incident. Quick, consistent communication supports coordinated response, regulatory compliance, and public trust. Delaying notifications, limiting communication to internal teams, or giving generic updates that don’t address regulatory input undermine transparency and risk management.