Data Breach Support

Customer raises a support ticket in our portal.

The ticket is then reviewed (normally within 2 hours) and the Incident Management process below is immediately initiated (for contracted customers).

If you are a new customer, we contact you and arrange a call to discuss your data breach, review requirements and agree a proposal.

Once the support ticket has been raised (and new customers have agreed our proposal) we set up a ‘Data Breach Review Call’ where we discuss the details of the breach and agree:

• Roles and responsibilities
• Immediate actions
• Any additional resources or technical expertise requirements

Note – at this point we will identify if there is personal data involved and what the regulatory requirements might be in relation to the data breach.

The focus of the Incident Manager in the early stages is to contain the Incident before it can get worse.

We will provide advice and guidance on how best to do this.  We would have access to additional specialist resources should they be needed at this point.

Also, it may be necessary to forensically assess the depth of the breach at this point in order to agree and implement the correct level of containment actions.

At this stage, one we have contained the Incident we assist our clients to properly investigate the root cause so that:

• We can understand how the data breach occurred
• What needs to be done to prevent it happening again
• How best to recover from the data breach

Getting to the point where the organisation can fully recover is vitally important to minimising business disruption and reducing financial losses.

We provide expert assistance to recover data, systems and general infrastructure.

Once the dust has slightly settled we will provide the client with a lessons learned report.

This is important because it provides management with:

• A view of what happened
• What has been learned from that
• What went well during the management of the incident
• What didn’t go that well during the management of the incident
• Recommendations for risk reduction and incident management improvements