Which of the following is a breach response procedure?

• A. A plan to respond to data breaches
• B. Access controls
• C. Secure storage
• D. Encryption

Answer: (A)

A breach response procedure is a formal plan that outlines the steps to take when a data breach is detected. It guides what to do, who to notify, how to contain and eradicate the breach, how to recover, and how to review the incident afterward. This makes it the best fit for a breach response procedure because it explicitly describes the organized process for responding to an incident, rather than just listing security controls.

The other options are preventive security measures rather than an incident response plan. Access controls limit who can access data, secure storage protects data at rest, and encryption makes data unreadable without the key. While important for reducing risk and impact, they describe protections built into systems, not the procedures followed after a breach occurs.