A vendor experiences a data breach affecting your organization's customer records. Under a robust third-party contract, what obligation should the vendor have?
-
A
Notify the organization within a contractually defined timeframe
-
B
Quietly remediate the breach without disclosure to avoid reputational damage
-
C
Transfer liability to the organization's cyber insurance policy
-
D
Immediately terminate the contract and destroy all data