Which of the following actions BEST balances regulatory obligations with evidence integrity and due diligence?
A. Release preliminary findings immediately, clearly labeled as “provisional,” and continue full forensic analysis.
B. Delay all external communication until the full investigation is complete and validated.
C. Provide regulators with a high-level incident acknowledgment, outline the investigation timeline, and commit to an official report after evidence validation.
D. Provide sanitized technical logs to regulators immediately while withholding full forensic images until legal review.