Data Breach Incident Management Policy

What is a Data Breach Incident Management Policy?

Minimise the impact of a data breach on your company by ensuring a clear plan is in place to ensure a quick, effective and orderly response to information security incidents. 

Whether it’s an email that has been sent to the wrong recipient, or a laptop that has been lost, it’s important that there are clear instructions on the steps that should be undertaken to minimise the impact. Those initial steps will include containing the breach, understanding the impact and establishing the steps to be taken to resolve the issue. 

Why is a Data Breach Incident Management Policy important?

Clear communication and understanding of roles and responsibilities are key to minimising the impact of a data breach. In some cases, external parties, such as the police, Information Commissioner’s Office and the individual data subjects may need to be contacted. This policy provides details of the process and procedures that should be followed at each stage of a breach. 

Alongside this policy, a data breach report and register are available as downloadable documents or within the Adoptech portal. 

ISO 27001 Data Breach Incident Management Policy

Data Protection policies are part of the requirements of the ISO 27001 Certification standard. The Data Breach Incident Management policy is one of those ISO 27001 policies required, you can take a look at the full list here.