Global Steel Exports Limited
This
Policy Title:
Data Breach Incident Response Plan
Policy No:
005
Version
Effective date:
26/03/2018
Replaces
Owner:
Data Protection Officer
1.01
plan has been produced to provide a coordinated and best practice to a data security breach which can happen for a number of reasons, including but not limited to:
Loss or theft of data or equipment on which data is stored Inappropriate access controls allowing unauthorised use Equipment failure Human error Unforeseen circumstances such as fire or flood Cyber attack Social Engineering offences where information is obtained by deceiving the organisation who holds it
Scope of the Incident Response Plan This document identifies numbered tasks that are the order of steps that need to be taken in the event of an incident. The plan consists of four key elements: Containment & Recovery Assessment of ongoing risk Notification of breach Evaluation and response Containment & Recovery 1. 2. 3. 4. 5.
All incidents or suspected incidents must be reported immediately to the Incident Manager The Incident Manager may decide to convene the Incident Response Management Team dependant on the impact and scale of the incident An initial breach evaluation, containment and recovery plan needs to be put into action quickly based on the following: What is the scale and extent of the breach? Are some systems operating normally? Do we need to take steps to limit or constrain the breach? What resources are required to limit the damage and recover quickly? What is the best way to recover from the breach taking into account:
a.) Risks b.) Impact c.) Timescales d.) Business damage i. Reputational ii. Commercial iii. Legal a
Assessing the Risks Pa ge 1|3 March 2018 GSE004_Backup Policy v1