Question $15(4$ points$)$

Saved

In the context of Web applications security incidents, which of the following is the best reason why an organization should maintain a comprehensive contacts list?

The IR team needs to have comprehensive contact lists that include the ISPs $($the current ISP and alternate ISP$),$ all of the clients, critical customers, key stakeholders, third party advertising agencies, and law enforcement authorities in order to ensure that the communications plan can be executed.

Incident responders will need to know how to access a backup website to ensure continuity of operations. The contact list will tell them who to call

The contacts list will include the home phone numbers of systems administrators.

A comprehensive contacts list will help the IR team notify personnel who should not report to work until after the incident is resolved.