How should incident response coordination with suppliers be structured?

• A. Rely on suppliers only after an incident.
• B. Ad-hoc communication as issues arise.
• C. Clear roles, communication plans, defined notification timelines, and cooperation procedures during incidents.
• D. No formal plan; rely on internal team only.

Answer: (C)

Coordinating incident response with suppliers requires a structured approach that defines who does what, how information is shared, when suppliers must be notified, and how both sides collaborate during containment and recovery. Clear roles establish accountability and ensure everyone knows their responsibilities when an incident hits, preventing duplicated work or gaps in action. A formal communication plan sets the channels, frequency, and content of updates, so internal teams and suppliers stay aligned under pressure. Defined notification timelines ensure timely escalation to the right parties, including vendors, customers, regulators if required, and help meet contractual and legal obligations. Cooperation procedures outline how to work together on containment, evidence preservation, access management, and coordinated recovery steps, as well as joint decision-making and post-incident review. This structured approach reduces delays, improves information flow, and strengthens resilience across the supply chain. Without it, waiting to involve suppliers until after an incident, relying on ad-hoc communication, or having no formal plan leads to confusion, slower detection and containment, and greater risk of impact and non-compliance.