Citation Tagging

Citation Reference: 2.5.2.3. Fundamental response measures (4)

Citation Guidance: If public disclosure is required by law, etc., or deemed appropriate for preventing secondary damage or protecting customers, etc., disclose known facts—such as the nature of the cyberattack, response status, and recovery outlook—promptly and appropriately, while considering the security risks to customers and the organization, etc.