Incident response and breach notification playbooks

Elements

The pieces this function usually contains in a large organisation:

• Playbook steps
• Contact list
• Notification templates

Catalog items that already cover part of it

• Data breach notification guidance LEGAL-0036
• Loss or destruction of books guidance LEGAL-0020

What is not described

general incident playbooks, contact lists and templates for non-personal-data incidents.

Classification

Status

Present partially

Fit

Element candidate

Suggested module

SEC: Security, Audit & Privacy

Suggested attributes

Pro; priority Optional; optional online action. Starting points only.

Cluster

Loss prevention, security and risk

Public excerpts

domain analysis

Archetypes and companies

Banks and credit unions; Big-box, warehouse club and mass merchants; Health systems and hospitals; Aerospace, defense and government contractors.

Example companies in these archetypes: JPMorgan Chase, Bank of America, Wells Fargo, Citigroup, U.S. Bancorp, Walmart, Costco, Target, Sam's Club, BJ's Wholesale Club, Meijer, HCA Healthcare. These come from general knowledge unless a source code is shown on the archetype page; it is not a statement that each company runs every element, and it implies no relationship.

Closest industry pages

• Banking, credit unions and cooperative banks
• Payments, remittance and money services
• Securities, asset management and diversified financials
• Savings groups, cooperatives and microfinance
• General merchandise and big-box stores
• Grocery and supermarkets
• Hospitals and medical facilities
• Clinics, dental and private practices
• Veterinary and pet care
• Aerospace and defense

Previous: Secrets, keys and device trust. Next: Safe, armoured-car and cash-in-transit logistics.

Status is a hand review against catalog names and descriptions and can be wrong. See the method.