An organization learns that the same exploited flaw remains in other business units after the first unit recovers. What should the response coordinate?

1. Announce every unit is compromised without evidence
2. Close all work because one system is restored
3. Assign the issue only to the public-relations team
4. Enterprise scoping and remediation of related exposure