Which of the following is a typical component of an Incident Management Program?

• A. Notifying all affected customers of the third party
• B. Developing new product features
• C. Conducting quarterly tax audits
• D. Training staff in sales techniques

Answer: (A)

Incident management centers on coordinating response and communication after an incident, especially when a third party is involved. A typical component is having a defined process to notify all affected customers when a third-party incident could impact them. This kind of timely, transparent communication helps protect customers, supports regulatory and contractual obligations for breach or incident notification, and preserves trust while the incident is contained and resolved. In practice, you would assess who is affected, determine the appropriate notification timelines, and deliver clear information about what happened, what data or services are affected, and what customers should do next. The other options aren’t part of incident management: developing new product features falls under product development, conducting quarterly tax audits is financial/compliance work, and training staff in sales techniques relates to sales enablement.