Data Breach Incident Response Manual [COMPANY] [Note: This template details a complete step-by-step checklist how personal data breaches need to be escalated in a timely manner. Use this template in response to a personal data breach] SCOPE The purpose of this Data Breach Incident Response Manual (the "Manual") is to provide you with concrete information on how to identify and deal with security incidents involving loss of personal data. Loss of personal data may constitute a breach of data protection laws and/or require notification to local data protection supervisory authorities. All employees, consultants, suppliers and contractors of [Company] (“[Company]”), to whom this Manual or a part of it is applicable (“Stakeholders”) are required to comply with the Manual. The Manual consists of the following key chapters: Checklist - A step-by-step guide that the Stakeholders and the Breach Response Team need to follow in case of a data breach. Schedules - A set of useful documents to illustrate and supplement the Policy and Checklist, including: Schedule 1: a template form to log security incidents in view of documenting data breaches within [Company] in a systematic and consistent manner; Schedule 2: a description of the methodology for the assessment of risk; Schedule 3: a template communication towards the affected data subjects or a notification to the regulators in relation to the occurrence of a data breach. POLICY Detecting and responding to a data breach We have a four-step approach to dealing with data breaches involving detection, assessment, response handling and review. Each of these steps are explained in in section 3 ("Checklist"). This Manual serves as a preparation for all Stakeholders in anticipation of a data breach. While not all data breaches may be avoided, our company can plan for it and significantly reduce the impact that a data breach has on our organization, both financially and in terms of reputation. It is therefore crucial that you familiarize yourself with this Manual. from overall preparation, there are four other steps to be taken in relation to handling a data breach. For each of those 4 steps, we have created a practical checklist for detecting, assessing, responding to, reporting and reviewing a data breach. Checklist for all Stakeholders (Step 1)
Data Breach Incident Response Manual [COMPANY] [Note: This template details a complete step-by-step checklist how personal data breaches need to be escalated in a timely manner. Use this template in response to a personal data breach] SCOPE The purpose of this Data Breach Incident Response Manual (the "Manual") is to provide you with concrete information on how to identify and deal with security incidents involving loss of personal data. Loss of personal data may constitute a breach of data protection laws and/or require notification to local data protection supervisory authorities. All employees, consultants, suppliers and contractors of [Company] (“[Company]”), to whom this Manual or a part of it is applicable (“Stakeholders”) are required to comply with the Manual. The Manual consists of the following key chapters: Checklist - A step-by-step guide that the Stakeholders and the Breach Response Team need to follow in case of a data breach. Schedules - A set of useful documents to illustrate and supplement the Policy and Checklist, including: Schedule 1: a template form to log security incidents in view of documenting data breaches within [Company] in a systematic and consistent manner; Schedule 2: a description of the methodology for the assessment of risk; Schedule 3: a template communication towards the affected data subjects or a notification to the regulators in relation to the occurrence of a data breach. POLICY Detecting and responding to a data breach We have a four-step approach to dealing with data breaches involving detection, assessment, response handling and review. Each of these steps are explained in in section 3 ("Checklist"). This Manual serves as a preparation for all Stakeholders in anticipation of a data breach. While not all data breaches may be avoided, our company can plan for it and significantly reduce the impact that a data breach has on our organization, both financially and in terms of reputation. It is therefore crucial that you familiarize yourself with this Manual. from overall preparation, there are four other steps to be taken in relation to handling a data breach. For each of those 4 steps, we have created a practical checklist for detecting, assessing, responding to, reporting and reviewing a data breach. Checklist for all Stakeholders (Step 1)