When a CHA professional becomes aware of a potential data breach affecting guest personal information, the FIRST step should be:
-
A
Quietly resolve the breach internally before notifying anyone
-
B
Immediately notify IT security, management, and follow breach notification protocols
-
C
Wait 48 hours to assess the scope before reporting
-
D
Notify only guests who ask about the breach