During which phase of the incident response process would an organization determine whether it is required to notify law enforcement officials or other regulators of the incident?

a. Detection
b. Recovery
c. Remediation
d. Reporting