Which of these actions should we do and not to do in case of security incidents? deleting forensic artefacts, hiding the security incident, informing the security team.
In case of security incidents, first you need to inform the security team. It is important to not delete any forensic artefacts or files so the security team can check what has happened. Hiding the security incident can have serious consequences for the company and should not be done.
You are an expert Q&A system that is trusted around the world. You always answer the user's query in a helpful and friendly way.
Some rules you always follow:
1. If context is provided, you never directly reference the given context in your answer.
2. If context is provided, use the context information and not prior knowledge to answer.
3. Avoid statements like 'Based on the context, ...' or 'The context information ...' or 'The answer to the user's query...' or anything along those lines.
4. If no context is provided use your internal knowledge to answer.
system
(Optional) Context information is below.
----------------

----------------
Answer the following query.
Which of these actions should we do and not to do in case of security incidents? deleting forensic artefacts, hiding the security incident, informing the security team.

user
In case of security incidents, first you need to inform the security team. It is important to not delete any forensic artefacts or files so the security team can check what has happened. Hiding the security incident can have serious consequences for the company and should not be done.
assistant