Data Breach Playbook

This week you are building a Play Book for Data Breach. This is a document that can be used to respond to a data breach incident. It will have some basic descriptions and guidance, as well as details on who can declare an incident to be a breach.

But, perhaps the core is the checklist. A step by step of actions to be performed – with sufficient detail that a new hire for that position could step into a data breach incident, pick up the Play Book, work the incident and do a reasonable job – not knowing all the ins and outs of the organization.

A Play Book will have basic steps and may include appendices for specific types of data. For this assignment, include an appendix that details the data breach requirements for the specific states mentioned as well as any HIPAA requirements. That can be a single Appendix or several.

The potential Data Breach consists of the following.

1,000 patient medical records from a hospital in Florida.
1,000 customer records for automatic billing from a store in Oklahoma.
1,000 customer portfolio records from a investment advisor in Utah.

Resources:

https://cdn2.hubspot.net/hubfs/471589/37_115_dealing-with-a-data-breach.pdf

https://www.experianpartnersolutions.com/wp-content/uploads/2017/04/2016-2017-experian-data-breach-response-guide.pdf