If you are unsure which law applies in a security incident, what is the best course of action?

If you are unsure which law applies in a security incident, what is the best course of action?

• A. Act according to your own interpretation
• B. Detain indefinitely until clarified
• C. Consult your supervisor or authorities and follow policy and local laws
• D. Post on social media to seek advice

Answer: (C)

When you’re unsure which law applies in a security incident, the best move is to escalate and rely on established procedures. Seek guidance from your supervisor or other qualified authorities and follow your organization’s incident response policy, while also complying with local laws. This approach brings in the right expertise to interpret applicable statutes, ensures actions stay within legal boundaries, and helps preserve evidence and the integrity of the response.

Using your own interpretation can lead to unlawful or inappropriate actions. Detaining someone indefinitely is not only improper but often illegal. Posting on social media to seek advice can spread misinformation and compromise safety and privacy. By routing the situation through the proper chain of command and legal/ compliance channels, you align with legal requirements and organizational standards.