CDPSE · Question #10
Which of the following MUST be available to facilitate a robust data breach management response?
The correct answer is D. An inventory of affected individuals and systems. Effective data breach response requires knowing exactly who and what was affected so containment, notification, and remediation actions can be taken immediately.
Question
Which of the following MUST be available to facilitate a robust data breach management response?
Options
- ALessons learned from prior data breach responses
- BBest practices to obfuscate data for processing and storage
- CAn inventory of previously impacted individuals
- DAn inventory of affected individuals and systems
How the community answered
(24 responses)- A4% (1)
- B4% (1)
- D92% (22)
Why each option
Effective data breach response requires knowing exactly who and what was affected so containment, notification, and remediation actions can be taken immediately.
Lessons learned from prior incidents are useful for process improvement but are not a mandatory prerequisite for responding to an active breach.
Data obfuscation techniques relate to protecting data before a breach occurs, not to managing a breach response after one has happened.
An inventory of previously impacted individuals refers to past incidents and does not provide the current scope needed for an active breach response.
An inventory of affected individuals and systems is essential for scoping the breach, determining notification obligations, and implementing containment measures. Without knowing which individuals were impacted and which systems were compromised, the organization cannot fulfill legal notification duties or remediate the breach effectively.
Concept tested: Data breach response - scoping affected individuals and systems
Source: https://www.nist.gov/privacy-framework/privacy-framework
Topics
Community Discussion
No community discussion yet for this question.