division(s) and staff involved); Extent of regions/countries potentially affected; Who has been notified; Actions taken with dates and action owners; Estimate of the financial cost and business impact of the incident; Recommendations for changes to avoid future occurrences; Estimated timescale for the implementation of recommended changes pending management authorization. 6 Notify all parties and stakeholders Prepare the Breach response involved that the incident is communications. team resolved. Coordinate the notification. 7 Convene a post-breach meeting of The meeting should the Breach response the breach response team. following issues: team Did the detection and response procedure work as intended? If not, in what areas is improvement required? What changes could be made to procedures to improve our ability to detect and handle similar incidents? What tools worked well and what additional tools would be useful in the future?
division(s) and staff involved); Extent of regions/countries potentially affected; Who has been notified; Actions taken with dates and action owners; Estimate of the financial cost and business impact of the incident; Recommendations for changes to avoid future occurrences; Estimated timescale for the implementation of recommended changes pending management authorization. 6 Notify all parties and stakeholders involved that the incident is resolved. Prepare the communications. Coordinate the notification. Breach response team 7 Convene a post-breach meeting of the breach response team. The meeting should the following issues: Did the detection and response procedure work as intended? If not, in what areas is improvement required? What changes could be made to procedures to improve our ability to detect and handle similar incidents? What tools worked well and what additional tools would be useful in the future? Breach response team