In case of a cybersecurity incident, whom should you communicate with inside the company? Which channels should you use — and which ones should you avoid? And how should you react?