Does your organization have documented procedures for securely sharing recovery information and restoration progress with stakeholders during incident response?

During a security incident or disaster recovery scenario, it's critical that appropriate stakeholders receive timely updates about recovery efforts while ensuring sensitive information remains protected.

This question assesses whether your organization has formalized how recovery information is shared, with whom, through what secure channels, and at what frequency during an incident response.As evidence, you could provide a section of your incident response plan that specifically outlines recovery information sharing protocols, including designated communication channels, authorized spokespersons, information classification guidelines for recovery data, and templates for status updates that balance transparency with security considerations.