What sequence best describes handling a security incident involving pay data?

• A. Ignore it
• B. Call supervisor
• C. Post on a public forum
• D. Follow the incident reporting protocol, notify the security officer/command, and document the event

Answer: (D)

When a security incident involving pay data occurs, you need a structured, accountable response. Following the incident reporting protocol and notifying the security officer or command ensures the right people are alerted, the incident is contained, and actions are coordinated. Documenting the event creates an audit trail for investigations, helps with post-incident analysis, and meets compliance requirements. Ignoring it risks further exposure and harm; posting on a public forum exposes sensitive information and violates policy; simply calling a supervisor may skip the formal escalation and documentation the process requires.