Good information, Tiffany! The incident response team needs to advise and notify the proper departments within the organization so that all who should be included will do their parts. Incident response strategies ought to incorporate arrangements concerning incident reporting – at least, what must be accounted for to whom and what times (to include initial and frequent update notifications). The right incident notifications may different among organization, yet parties that are regularly advised include: Chief of Information Officer, System Owner, Human Resources, Public Relations, Head and Local Information Security Officer, Legal Department, Other incident response team within the organization, and other external incident response experts