Which option lists the appropriate recipients to notify in response to a cyber threat?

• A. Public relations
• B. Local government
• C. IT and command
• D. Everyone on base

Answer: (C)

When a cyber threat is detected, the priority is rapid containment and coordinated incident response through those who can both technically manage the systems and authorize actions. IT handles the actual systems, networks, and forensic steps to contain and investigate the threat, while command provides leadership, priorities, and resources to escalate and coordinate the response across the organization. This pairing ensures actions are swift, controlled, and aligned with the incident response plan.

Public relations deals with outward communication, which is important later, but not the first line of defense during the incident. Local government isn’t typically part of the immediate internal response unless there’s a regulatory or legal requirement. N notifying everyone on base would spread information unnecessarily and could hinder containment. So the most appropriate recipients to notify are IT and command.