back

• Develop a data breach management plan.
• Develop a data team responsible for managing a data breach.
• Rehearse the plan, identify key blockers and help remove blockers.
• Plan phases:

• 1. Detect the data breach: check security systems, firewalls, advanced threat protection systems, network behaviour, login activities, external parties notifications;
  2. Contain the data breach: Ensure the impact of the breach is restricted that the attack cannot progress any further within the organization and identify how the breach occurred and the root cause of the breach;
  3. Eradicate the effects: review the affected systems;
  4. Remediate: Eliminate the cause of the breach, remove malicious software, patch, reconfigure systems;
  5. Recover: Recover the systems back to the state they were in before the breach occurred;
  6. Review: Document the data breach;
  7. Communicate: Inform affected customers and data protection authorities or other relevant authorities if needed.