individuals affected. Maintain Maintain Maintain Maintain Maintain Maintain Maintain internal internal internal internal internal internal internal to to to the to the to the to members. the members. members. members. to the the Inform TSA members. Also inform Also inform Also inform members. Inform the the the Also Also TSA individuals individuals individuals inform inform the affected as affected as affected as the individuals well as the well as the well as the affected ICO. Inform ICO. Inform ICO. Inform as well as TSA TSA TSA affected the ICO. as well Inform as the TSA ICO. Inform TSA Step 2: Containment and Recovery Once it has been established that a data breach has occurred, the Executive Committee needs to take immediate and appropriate action to limit the breach. The Executive Committee will: Establish who within the Scout Group, District, County/Area/Region needs to be made aware of the breach and inform them of what they are expected to do to contain the breach (for example finding a lost piece of equipment, changing access codes on doors, isolating/closing a compromised section of the network, etc) Establish whether there is anything that can be done to recover any losses and limit the damage the breach can cause (for example physical recovery of equipment/records, the use of back-ups to restore lost/damaged data) Establish if it is appropriate to notify affected individuals immediately (for example where there is a high level of risk of serious harm to individuals) Where appropriate (for example in cases involving theft or other criminal activity), inform the police. Step 3: Risk Assessment
individuals affected. Maintain internal to members. Inform TSA Maintain internal to the members. Inform TSA Maintain internal to the members. Also inform the individuals affected as well as the ICO. Inform TSA Maintain internal to the members. Also inform the individuals affected as well as the ICO. Inform TSA Maintain internal to the members. Also inform the individuals affected as well as the ICO. Inform TSA Maintain internal to the Also inform the affected as well as the ICO. Inform TSA Maintain internal to the members. Also inform the individuals affected as well as the ICO. Inform TSA Step 2: Containment and Recovery Once it has been established that a data breach has occurred, the Executive Committee needs to take immediate and appropriate action to limit the breach. The Executive Committee will: Establish who within the Scout Group, District, County/Area/Region needs to be made aware of the breach and inform them of what they are expected to do to contain the breach (for example finding a lost piece of equipment, changing access codes on doors, isolating/closing a compromised section of the network, etc) Establish whether there is anything that can be done to recover any losses and limit the damage the breach can cause (for example physical recovery of equipment/records, the use of back-ups to restore lost/damaged data) Establish if it is appropriate to notify affected individuals immediately (for example where there is a high level of risk of serious harm to individuals) Where appropriate (for example in cases involving theft or other criminal activity), inform the police. Step 3: Risk Assessment
GDPR-Data-Breach-Response-Plan.docx