Who is it for?

‘Be Prepared’ is not just a good motto for boy scouts; it’s sound business sense too. When something goes wrong, emotions run high, panic sets in and it can be difficult to keep control of events. What matters most at a time like that is having a calm, methodical approach you can turn to with clear steps to follow. Since the GDPR came into force last year, the reporting of some data security breaches has been mandatory, making it more important than ever that you can demonstrate your preparedness to deal with such eventualities. This service is suitable for any business, large or small, which wants to ensure it is well prepared in advice for a data breach.

What do we mean by a data breach?

A data breach may be any situation in which customer or employee data is lost, stolen, damaged or otherwise compromised. It might be the result of human error, a technical issue or criminal activity.

What is included?

• Initial discussion to confirm scope and timings • Review of any existing incident readiness policy and other relevant documents • Discussions, where applicable, with key members of staff • Creation of a clear incident readiness policy and/or process, a breach log and clear instructions for employees • Advice on appropriate methods of communicating the incident readiness policy to your employees • suggested e-mail/letter templates and phone script/conversation guides for use in the event of breach • Advice on allocating roles and responsibilities for aspects of the incident readiness process • If applicable, advice on integrating incident readiness into your wider business continuity/disaster recovery process • 2 rounds of revision to all documentation (further revisions will be subject to a small additional charge) • Basic security advice and, if applicable, highlighting any technical security issues that require further attention • All e-mail and phone communication while the work is underway • wrap up call to conclude the work • 10% discount on any further services bought as a result

Add-ons and extras:

• Breach simulation exercise What is not included? • Any additional work or documentation not listed above • advice on preparedness for other types of incident, which are not data related • Mileage or accommodation costs • Translation • Detailed technical/network security advice

What will I get?

• A clear set of internal documents and process for managing a data breach • Clear, written advice on next steps and managing breaches • The reassurance of knowing you are prepared should the worst happen