A security guard performing duties at a critical infrastructure site in Alberta receives an alert regarding an active cybersecurity breach impacting the facility's SCADA system. What is the immediate and most critical action the security guard should take in response to this specific type of emergency?

Question: A security guard performing duties at a critical infrastructure site in Alberta receives an alert regarding an active cybersecurity breach impacting the facility's SCADA system. What is the immediate and most critical action the security guard should take in response to this specific type of emergency?

Answer options:

• Initiate a full facility evacuation to protect personnel from potential physical disruption.
• Gather detailed evidence of the breach, including screenshots and system logs, for forensic analysis. ✅ Immediately notify the designated organizational emergency response team and follow established communication protocols.
• Attempt to isolate the compromised network segments to prevent further spread of the cyberattack.

Correct answer: Immediately notify the designated organizational emergency response team and follow established communication protocols.

Explanation: In an emergency, particularly a cyber breach, the most critical immediate action for a security guard is to alert the appropriate internal authorities or the designated emergency response team. This ensures that expert personnel can be engaged to manage the technical and operational aspects of the breach, aligning with standard emergency protocols for critical infrastructure protection.