Who should you report to if contacted by the media about sensitive information?

Reporting to the security office when contacted by the media about sensitive information is essential for several reasons. The security office is specifically trained to handle incidents involving sensitive data and can provide the necessary guidance on how to navigate media inquiries. They are responsible for ensuring that information is disclosed appropriately and in accordance with policies and regulations designed to protect national security and organizational integrity.

Additionally, the security office has protocols in place for managing communications with outside parties, such as the media, and can help prevent unauthorized disclosures that might compromise sensitive information. This step ensures that any information shared is controlled and consistent with official messaging, which is crucial in maintaining the organization's credibility and compliance with legal obligations.

While the legal department might also play a role in ensuring that any communications comply with regulations, the immediate responsibility for handling media inquiries lies with the security office. They are equipped to evaluate the potential risks and implications of any information that could be disclosed and will coordinate with other relevant departments when necessary.