Workshop 11
Data Breach Management

Back to the DPO Guide

Data Breach Management

This workshop prepares the organisation to detect, assess and report security incidents affecting personal data, with a clear procedure, a prepared notification decision and a practical exercise.

Workshop tasks

1. 1. Definition & internal reporting

   Explain to everyone what an incident is (email to the wrong recipient, lost device, compromised account, ransomware) and how to report it immediately.

2. 2. Response procedure

   Document the response team, immediate containment, fact-finding, escalation and lessons learned.

   In ResGuard: Policy Framework

3. 3. Risk assessment & notification

   Prepare the criteria for deciding whether to notify the authority and the people affected, the deadlines and notification templates.

4. 4. Incident register in ResGuard

   Record every incident, including those not notified: facts, assessment, decision and corrective measures.

   In ResGuard: Incident Response

5. 5. Simulation exercise

   Test the procedure with a realistic scenario and check whether the notification deadline would have been met.

   In ResGuard: Incident Response

6. 6. Workshop review & close-out

   Review the results, attach evidence and close the objective in ResGuard.

   In ResGuard: Objective Manager

Expected result

• All employees can recognise and report an incident
• Response procedure approved
• Notification criteria, deadlines and templates prepared
• Incident register kept in Incident Response

ResGuard modules: Incident Response, Policy Framework