Was the correct security marking applied to Consider further training to educate on the pre-release access email? their obligations under the Code of Practice. Increased management control of the processes. Should stronger words be used in the text that is sent out with pre-release access? Statistics published after the required time of 9.30am (Protocol 2, principle 4) Things to consider: Possible corrective actions: How sensitive are the statistics and how Consider emailing key users a copy of the long is the delay likely to be? release. Has pre-release access to the statistics Issue a statement on your organisation’s been restricted? Should you ask people with website alerting users to the problem pre-release access not to disclose or Consider whether there is another way to discuss the statistics until further notice? publish the release. Can social media channels be used to acknowledge or apologise for the delay?
Was the correct security marking applied to the pre-release access email? Consider further training to educate on their obligations under the Code of Practice. Increased management control of the processes. Should stronger words be used in the text that is sent out with pre-release access? Statistics published after the required time of 9.30am (Protocol 2, principle 4) Things to consider: How sensitive are the statistics and how long is the delay likely to be? Has pre-release access to the statistics been restricted? Should you ask people with pre-release access not to disclose or discuss the statistics until further notice? Can social media channels be used to acknowledge or apologise for the delay? Possible corrective actions: Consider emailing key users a copy of the release. Issue a statement on your organisation’s website alerting users to the problem Consider whether there is another way to publish the release.
Breach-reporting-template-Oct-16.docx