Data Breach Management
This workshop prepares the organisation to detect, assess and report security incidents affecting personal data, with a clear procedure, a prepared notification decision and a practical exercise.
Workshop 11 video
Walkthrough of the workshop and its tasks — coming soon
What ResGuard provides
- Awareness training that teaches every employee what an incident is and how to report it
- Incident register with a built-in breach assessment checklist
- The notification rules and deadlines of your jurisdiction shown in every incident
- Template for the breach response procedure with notification templates
- Notification templates for the authority and for individuals in the Policy Framework
- Tabletop exercise template to plan and document the breach exercise
Workshop tasks
-
1. Definition & internal reporting
Every employee learns what an incident is (email to the wrong recipient, lost device, compromised account, ransomware) and how to report it immediately in the ResGuard Awareness Training. You only define the internal reporting channel.
In ResGuard: Awareness Training -
2. Response procedure
Document the response team, immediate containment, fact-finding, escalation and lessons learned.
In ResGuard: Policy Framework -
3. Risk assessment & notification
Prepare the criteria for deciding whether to notify the authority and the people affected, and the deadlines. The notification templates for the authority and for individuals are ready in the ResGuard Policy Framework.
In ResGuard: Policy Framework -
4. Incident register in ResGuard
Record every incident, including those not notified: facts, assessment, decision and corrective measures.
In ResGuard: Incident Response -
5. Simulation exercise
Test the procedure with a realistic personal data breach, for example a salary spreadsheet emailed to the wrong external recipient, and check whether the notification deadline would have been met. Plan and document it with the ResGuard tabletop exercise template and upload the documentation as evidence to the task.
In ResGuard: Policy Framework -
6. Workshop review & close-out
Review the results, attach evidence and close the objective in ResGuard.
In ResGuard: Objective Manager
What to keep in mind in Chile
- Law No. 21.719 requires security breaches that pose a reasonable risk to data subjects' rights to be reported to the Agency by the fastest means possible and without undue delay.
- The affected data subjects must also be informed when the breach involves sensitive data, data of children under 14 or economic or financial data.
- Operators covered by Law No. 21.663 must also report cybersecurity incidents to the CSIRT of the National Cybersecurity Agency, with very short early-warning deadlines.
Expected result
- All employees can recognise and report an incident
- Response procedure approved
- Notification criteria, deadlines and templates prepared
- Incident register kept in Incident Response
ResGuard modules: Incident Response, Awareness Training, Policy Framework