First, gather all relevant evidence, as it is essential for Information Security to identify and confirm whether an incident has occurred. Once the incident is confirmed and detailed evidence has been collected, it should be documented in an appropriate format. If the breach is of a general nature, consider organizing a one-on-one session to raise awareness and educate stakeholders on prevention. However, if the breach involves legal or criminal intent, it should be reported promptly, as decisions at this level fall under the responsibility of high-level management. In such cases, it is crucial to involve all relevant parties to ensure a coordinated response.

Além dos pontos abordados, é importante adotar medidas estratégicas que fortaleçam a relação interna. Primeiro, avaliar o impacto da situação na equipe, identificando possíveis inseguranças ou conflitos que possam ter surgido, para direcionar ações de reparo. Segundo, estabelecer mecanismos preventivos, como treinamentos regulares e materiais educativos acessíveis, garantindo que todos compreendam e internalizem as políticas de segurança. Por fim, considerar a implementação de um sistema de feedback anônimo, permitindo que funcionários expressem dúvidas ou preocupações de maneira segura, prevenindo ruídos futuros.

Aplicaria uma advertência escrita e reforçaria por meio de reuniões de alinhamento a importância da descrição e ética. É importante mantermos sempre as regras da empresa bem claras, ate mesmo as que parecem óbvias

I had several opportunities to address issues related to Spreading misinformation about policies - sometimes misinformation, other times misinterpretation. First step I would suggest in such cases is to speak to the team member who is the key role player. Understand perspective, explain, share and bring alignment to understanding on the topic. 2nd, Establish control on the written or verbal update. 3rd, Reinforce / Re communicate as required to build common understanding on the policy. Have Official communication released from relevant authority 4th, Set up a policy monitoring body to address such issues organisationally in future.