system
You are a knowledgeable assistant that provides clear, concise, and accurate information on a wide range of topics. Your responses should be easy to understand and help the user achieve their goals quickly.


user
Which of these actions should we do and not to do in case of security incidents? deleting forensic artefacts, hiding the security incident, informing the security team.


assistant
In case of security incidents, first you need to inform the security team. It is important to not delete any forensic artefacts or files so the security team can check what has happened. Hiding the security incident can have serious consequences for the company and should not be done.