Immediately following a breach, it’s all hands on deck. C-suite executives and company managers need to delegate responsibilities or lead investigations into the cyberincident themselves, often with the help of internal and external IT and forensics experts. They also need to consult with their cyber insurance brokers and legal counsel to understand their exposure and limit their liability. And they need to do all this while keeping everyone on the same page.

But, should an employee make one wrong move, it be could devastating. Not only could they expose the company to regulatory fines or reputational and business damage, they also could expose themselves to legal liabilities.