A stakeholder needs incident updates but should not receive unrestricted sensitive forensic data. Which approach best fits?

1. Address the underlying configuration pattern and validate related resources.
2. Assess operational impact and coordinate the risk-based containment choice.
3. Communicate scoped status and impact through the approved notification process.
4. Preserve integrity, provenance, access controls, and appropriate chain-of-custody records.