How should Sub Deb Club handle security incidents or data breaches affecting member information?

• A. Incidents must be reported promptly to the board, with no requirement to notify members.
• B. Incidents should be recorded but not disclosed to members unless required by law.
• C. Incidents must be reported promptly, contain the breach, notify affected members per policy and law, and implement remediation measures and a post-incident review.
• D. Incidents should be ignored unless they are very large.

Answer: (C)