When a catastrophic security breach occurs, who is responsible for assessing the impact, minimizing damage, and coordinating the remediation process, such as identifying compromised data, quantifying data loss, and pinpointing affected data subjects?