Law enforcement agencies should be notified if the breach was the result of a hacking, theft, or other crime, or if legal requirements mandate government notification. Call in Expert Help Although the internal first response team should spearhead the effort at its outset, depending on the gravity of the breach, it may be necessary to enlist outside assistance to expand the footprint of the response. Companies should establish relationships with law firms, information technology specialists, forensics experts, and other professionals