Data Breach Incident Response Plans

Question 1

After a breach has been detected, what are the three categories of response tasks?

Answer 1

Securing your operations, notifying appropriate parties, and fixing vulnerabilities. These can (and should!) happen in parallel

Question 2

True or False: Internal and External messages about a breach should be delivered separately and contain different info.

Answer 2

False! Internal and external announcements should be delivered around the same time to avoid leaks, align messaging and demonstrate transparency.