At a major healthcare provider, staff received phishing emails impersonating HR.

This scenario highlights a preparation phase improvement. ECIH strongly emphasizes the importance of out-of-band communication during incidents, especially when primary systems are compromised.

Option D is correct because VOIP and SMS reporting channels allow incident reporting even when email systems are unavailable or under attack. ECIH identifies out-of-band communication as critical for maintaining coordination and timely escalation during incidents.

Options A–C do not address the reporting failure described.

Establishing alternate communication channels strengthens incident readiness and response resilience, aligning directly with ECIH best practices.