Does your organization have a formal process for updating senior leadership on the status of major security incidents?

Regular updates to senior leadership during major security incidents ensure proper oversight, enable informed decision-making, and demonstrate appropriate governance of security events. This practice helps leadership understand the business impact of incidents and allocate necessary resources for response and recovery. Evidence could include documented incident communication procedures that specify leadership notification requirements, templates for executive briefings during incidents, meeting minutes from incident review sessions with leadership, or examples of past incident status reports shared with executives (with sensitive details redacted).