# Assess a data breach

Describe an event and use the severity assessment wizard.

> **Access:** member. **Beta** feature, subject to enabled modules and your plan.

## Purpose

The breach workspace records events affecting personal data and provides a severity assessment wizard.

## Use the wizard

1. Open breaches from GDPR or from the linked incident record.
2. Start the severity assessment.
3. Complete **Incident details**: context, entity and known facts.
4. At **Data impact**, describe the relevant data and consequences.
5. Complete **Risk factors** using available information.
6. Review **Assessment results** and save the offered tracking information.

## Review and complete

Reopen the record when new facts become known. If you edit the assessment, check the updated results. Distinguish confirmed facts from assumptions in descriptions.

## Wizard limitations

The result supports analysis; it does not make decisions for your organization’s responsible people. Notification decisions and related actions belong in your event-management process. Do not assume that recording a breach in CISAPP sends an external notification.

## Expected outcome

The record retains reviewable context and assessment information consistent with the associated [incident](https://docs.cisapp.eu/en/risks/incidents).