Maintain contact with internal teams, including the board of directors and major investors. Notify key partners and customers. Identify and communicate with the appropriate regulators and reporting agencies. Law enforcement may also need to be contacted. Ensure that those impacted by the breach are appropriately notified. Answer questions from press and analysts. Maintaining a level of transparency is important at a time of crisis. A well-executed communications plan not only minimizes harm and potential legal liability but also can enhance a company's overall reputation, according to the Online Trust Alliance.