One of the organizations was breached and the CEO of the organization was speaking with the media. During this process, he spoke about various things, which he should not have told the media as it led to a bad reputation for the organization among the public. In short, he was not very well prepared on what to say and how to speak when it comes to the external or public domains.
Ideally, there should be people who must be trained to speak with the media; they must know exactly what to communicate, otherwise it might bring a negative impact within the organization. This should be part of the company-wide incident-response plan.
