Browse Definitions :
Definition

data breach response plan

A data breach response plan is a course of action intended to reduce the risk of unauthorized data access and to mitigate the damage caused if a breach does occur.

Here are 10 crucial steps of data breach response planning:

  1. Use resources such as business impact analysis (BIA) and disaster recover (DR) methods to identify your organization’s most sensitive data and implement actions to protect data based on the severity of the impact a breach would have.
  2. Perform a high-level risk assessment of your IT environment and identify vulnerable areas.
  3. Implement measures to reduce the likelihood of breaches caused by human error.
  4. Address security on multiple levels: Educate employees on social engineering tactics; ensure that data is encrypted. Make sure that processes involved are as streamlined and automatic as possible to maximize compliance.
  5. Learn the specifics of current federal and state data breach legislation.
  6. Ensure that the breach response team has authorization to take necessary steps immediately when a breach occurs so that crucial time isn’t lost obtaining permission for action.
  7. Test your response plan frequently and address any weak areas as soon as they are discovered.
  8. Find contact information for forensic companies, law enforcement agencies and legal and public relations firms that you will deal with in the event of a breach and establish relationships now.
  9. Provide training for responders on, for example, evidence collection. Ensure that any required certifications are in place.
  10. Create a plan for how a breach will be disclosed so that the news will be communicated swiftly, transparently and effectively. Include your solution to the problem and a way for those affected to contact you. 

 

This was last updated in July 2012

Continue Reading About data breach response plan

SearchCompliance
  • ISO 31000 Risk Management

    The ISO 31000 Risk Management framework is an international standard that provides businesses with guidelines and principles for ...

  • pure risk

    Pure risk refers to risks that are beyond human control and result in a loss or no loss with no possibility of financial gain.

  • risk reporting

    Risk reporting is a method of identifying risks tied to or potentially impacting an organization's business processes.

SearchSecurity
  • Pretty Good Privacy (PGP)

    Pretty Good Privacy or PGP was a popular program used to encrypt and decrypt email over the internet, as well as authenticate ...

  • email security

    Email security is the process of ensuring the availability, integrity and authenticity of email communications by protecting ...

  • Blowfish

    Blowfish is a variable-length, symmetric, 64-bit block cipher.

SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • fault-tolerant

    Fault-tolerant technology is a capability of a computer system, electronic system or network to deliver uninterrupted service, ...

  • synchronous replication

    Synchronous replication is the process of copying data over a storage area network, local area network or wide area network so ...

SearchStorage
  • direct access

    In computer storage, direct access is the process of reading and writing data on a storage device by going directly to where the ...

  • kibi, mebi, gibi, tebi, pebi and exbi

    Kibi, mebi, gibi, tebi, pebi and exbi are binary prefix multipliers that, in 1998, were approved as a standard by the ...

  • holographic storage (holostorage)

    Holographic storage is computer storage that uses laser beams to store computer-generated data in three dimensions.

Close