Assess a data breach
Describe an event and use the severity assessment wizard.
Access: member. Beta feature, subject to enabled modules and your plan.
Purpose
The breach workspace records events affecting personal data and provides a severity assessment wizard.
Use the wizard
- Open breaches from GDPR or from the linked incident record.
- Start the severity assessment.
- Complete Incident details: context, entity and known facts.
- At Data impact, describe the relevant data and consequences.
- Complete Risk factors using available information.
- Review Assessment results and save the offered tracking information.
Review and complete
Reopen the record when new facts become known. If you edit the assessment, check the updated results. Distinguish confirmed facts from assumptions in descriptions.
Wizard limitations
The result supports analysis; it does not make decisions for your organization’s responsible people. Notification decisions and related actions belong in your event-management process. Do not assume that recording a breach in CISAPP sends an external notification.
Expected outcome
The record retains reviewable context and assessment information consistent with the associated incident.