On a Monday morning, the organization's legal department receives a call from the Federal Bureau of Investigation (FBI) regarding some suspicious activity involving the organization's systems. Later that day, an FBI agent meets with members of management and the legal department to discuss the activity. The FBI has been investigating activity involving public posting of sensitive government documents, and some of the documents reportedly belong to the organization. The agent asks for the organization's assistance, and management asks for the incident response team's assistance in acquiring the necessary evidence to determine if these documents are legitimate or not and how they might have been leaked.

Would the organization consider this activity to be an incident? If so, which of the organization's policies does this activity violate? (Section 2.1)

What measures are in place to attempt to prevent this type of incident from occurring or to limit its impact? (Section 3.1.2)