How should security teams coordinate with local law enforcement during a significant incident?

• A. Establish a liaison, share information, follow incident command structure, and document communications.
• B. Work independently and communicate only when the incident is resolved.
• C. Contact only after media inquiries begin.
• D. Provide all data publicly without vetting.

Answer: (A)

Coordinating with local law enforcement during a significant incident hinges on structured collaboration and clear, timely communication. Establishing a liaison ensures there’s a single, consistent point of contact on both sides, which prevents miscommunication and duplicated efforts. Sharing information that affects safety, evidence protection, and incident containment allows all responders to make informed decisions quickly. Following an incident command system keeps roles, priorities, and resource usage aligned across agencies, creating a unified approach and interoperable communications. Documenting all communications provides an auditable trail for legal, regulatory, and after-action review purposes, and supports future training and improvement.

Other approaches introduce risk: working independently and waiting until resolution creates dangerous gaps; delaying contact until media inquiries begin can miss critical intel and spread misinformation; and releasing all data publicly without vetting can expose sensitive information and hamper investigations.