Reporting requirements for electronic spillage?

• A. Notify security manager or commanding officer of the incident, as well as their CoC.
• B. Notify the ship's chaplain
• C. File a report with local authorities
• D. Ignore the incident

Answer: (A)

Reporting electronic spillage focuses on rapid escalation through the proper leadership channels so containment and accountability begin immediately. The best practice is to alert the security manager or commanding officer and inform the chain of command, so the incident can be quickly assessed, contained, and documented, with the right cyber and security teams brought in and the response coordinated according to policy. This early notification enables actions like isolating affected systems, preserving evidence, and initiating formal incident handling procedures.

Other avenues like notifying a chaplain aren’t part of the incident response process for information security events, and involving local authorities may be appropriate later if policy or law requires, but not as the initial reporting step. Ignoring the incident would let the breach escalate and leave critical assets and data unprotected.