Incident Management Simplified

“Materiality” is based on each organization’s unique definition of risk. In order to determine an incident’s capacity for material harm, each organization must first have a working process to categorize severity thresholds for which to qualify each incident and how they’ve involved stakeholders in the decisioning. From there, assessing the materiality of an event is a matter of determining what tangible impact the event may have on business operations and whether they’re substantial in the eyes of regulators, stakeholders, or investors.

A security incident is a scenario where there is an unauthorized disclosure of PII. For example, an attempted phishing attack or social engineering attack. A data breach is when that incident is notifiable under breach
notification laws. While all data breaches are privacy incidents, not all incidents are breaches.

• What are some examples of a non-breach event?
  • Some examples of an event could include a security event that required response and reporting to your Board but contained no PI, or learning about a compromised server that is found to contain encrypted data.
• What are some examples of a privacy incident?
  • Some examples of a privacy incident can include: a laptop containing PII is stolen, an email with PII is sent to the wrong person, or a box of documents with PII is lost during shipping.

• What is a security incident under GDPR?
  • According to the GDPR, “a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.”

A successful privacy program should simplify the incident management lifecycle to reduce risk for your organization and build trust for your brand. The program should help your team arrive at consistent and reliable breach decisioning every time. A mature incident management program should be intelligent – capable of automatically mapping the regulatory landscape and agile, to stay ahead of all relevant laws.

Our implementation timeline ensures that your team launches feeling confident and empowered, without taking time and resources away from other priorities.

During your onboarding experience, your dedicated implementation specialist will guide you through customization and configuration options, best practices, and help bring your digitally transformed, privacy automation to life.

Radar® offers established integrations with preferred security and compliance providers, like ServiceNow, Splunk Phantom, Protenus, Fair Warning, and more.

Additionally, a robust and agile API streamlines the connection between data detection tools and Radar®.

Radar® Privacy is designed, built, and supported with security and privacy in mind.

We understand the unique responsibility that we have as we transform your privacy incident response practice. We need to meet the same obligations that you must meet, and you depend on us to be trusted stewards of your data and your reputation.