Incident Response

Follow UoN/DPA protocols:

1. Detection: Monitor for breaches (e.g., unauthorized access).
2. Containment: Isolate affected systems; notify DPO within 1 hour.
3. Assessment: Evaluate scope/impact.
4. Notification: Report to ODPC within 72 hours if high-risk; inform subjects if harm likely.
5. Remediation: Restore data; conduct root-cause analysis.
6. Lessons Learned: Update policies; train staff.

Maintain an incident log; simulate breaches bi-annually.