If you are unsure which law applies in a security incident, what is the best course of action?

• A. Act according to your own interpretation
• B. Detain indefinitely until clarified
• C. Consult your supervisor or authorities and follow policy and local laws
• D. Post on social media to seek advice

Answer: (C)

When the legal requirements aren’t clear during a security incident, the priority is to rely on proper channels rather than guesswork. The best course is to consult your supervisor or authorities and follow your organization's policy and the local laws. This ensures actions are lawful, proportionate, and align with established procedures, while also guiding how to document the incident, preserve evidence, and handle privacy considerations. The supervisor or authorities can identify the applicable jurisdiction, determine whether law enforcement should be involved, and provide any necessary guidance for compliant response. Acting on personal interpretation can create legal risk, detaining someone indefinitely is not lawful, and seeking advice on social media can expose sensitive information and derail the investigation.