Which of the following is NOT a recommended action when addressing external threats?

• A. Coordinate with security and possibly law enforcement for external threats.
• B. Apply policy for reporting and safety.
• C. Ensure confidentiality and alternative arrangements for customers.
• D. Immediately disclose all incident details to the public without a plan.

Answer: (D)

Handling external threats requires a coordinated response and controlled communication. The recommended actions center on working with security teams and, when appropriate, law enforcement to quickly assess and contain the threat, ensuring the safety of people and premises. Having clear policies for reporting and safety ensures everyone knows their roles, responsibilities, and the exact steps to take, which reduces confusion and speeds protective measures. Protecting confidentiality and providing suitable alternatives for customers helps maintain trust and minimize disruption while information is managed carefully to avoid exposing sensitive details or causing unnecessary panic. On the other hand, disclosing all incident details to the public immediately and without a plan can create panic, compromise investigations, reveal vulnerabilities, and damage the organization’s reputation. A well-planned communication approach, with approved messaging and a designated spokesperson, helps share necessary information responsibly while supporting safety and security efforts.