An incident notification plan typically includes which stakeholder group?

• A. Law enforcement
• B. Marketing executives
• C. Customer product feedback
• D. Internal training manuals

Answer: (A)

An incident notification plan focuses on who must be alerted and involved when a security event occurs, especially those who can help with investigation, containment, and legal obligations. Law enforcement is typically included because many incidents involve potential criminal activity, and authorities may need to be notified to preserve evidence, coordinate an investigation, or comply with legal requirements. This makes law enforcement a standard stakeholder in incident response and notification.

Marketing executives, customer product feedback, and internal training manuals aren’t usually part of the standard notification list for an incident. Marketing may be informed for business impact later, but they aren’t responders or regulators. Customer feedback isn’t relevant to the mechanics of incident response, and internal training manuals are documentation, not stakeholder groups to be notified about an incident.