IQWorks Breach Response & Notification runs data breach notification and response from one ComplyIQ register of security incidents, from detection to closure. An intimation countdown runs from detection until both the Data Protection Board and the affected Data Principals are recorded as notified, and ConsultIQ drafts breach notifications from its Breach Notification template.
Breach Notification and Response Challenges
The notification deadline runs from the moment a breach is detected. The team has to establish what happened, which data and which Data Principals are affected, which vendors are involved, and who must be told.
Incident notes scattered across chat threads and email make the timeline hard to reconstruct, and the notification deadline is easy to lose track of.
No single register
Incidents are recorded in chat threads and email, with no shared timeline.
Deadlines out of sight
There is no record of when notification is due or who has already been told.
Scope unknown
The team cannot quickly say which data and which Data Principals are affected.
Vendor breaches
When a vendor is breached, the link to its contract and assessment is missing.
Breach Notification and Response with IQWorks
Your team today
Incidents recorded in chat and email
With IQWorks
One incident register
ComplyIQ Security Incidents records when an incident occurred, was detected and was reported, with its severity, status, affected Data Principals and the vendor involved.
Your team today
The notification deadline goes unwatched
With IQWorks
An intimation countdown from detection
A countdown runs from detection and stays open until both the Board and the affected Data Principals are recorded as notified.
Your team today
Notices written from scratch under pressure
With IQWorks
Notices drafted from a template
ConsultIQ's Breach Notification template drafts notifications to the supervisory authority and to data subjects.
Your team today
The data involved is unclear
With IQWorks
Scope from your inventory
The DiscoverIQ Data Catalog helps the team scope affected data by department, attribute and file name, and each incident links to the vendor register.
See it working on your own data
A live walkthrough against your regulations and your systems.
Request DemoProducts for Breach Notification and Response
Breach Notification and Response Workflow
Log the incident
Record when the incident occurred, was detected and was reported, with its severity and the vendor involved.
Log the incident
Record when the incident occurred, was detected and was reported, with its severity and the vendor involved.
Scope the impact
Use the DiscoverIQ catalog to find the affected data, and record the number of affected Data Principals.
Scope the impact
Use the DiscoverIQ catalog to find the affected data, and record the number of affected Data Principals.
Track the notification deadline
The intimation countdown runs from detection until the Board and affected Data Principals are recorded as notified.
Track the notification deadline
The intimation countdown runs from detection until the Board and affected Data Principals are recorded as notified.
Draft the notices
Draft notifications to the supervisory authority and data subjects from ConsultIQ's Breach Notification template.
Draft the notices
Draft notifications to the supervisory authority and data subjects from ConsultIQ's Breach Notification template.
Close the incident
Closing the incident stops the countdown, and breach management stays scored as a control category in your posture.
Close the incident
Closing the incident stops the countdown, and breach management stays scored as a control category in your posture.
Key Takeaways
- One register for every security incident
- A countdown that stays open until both notifications are recorded
- Notices drafted from a breach template
- Affected data scoped from your discovery inventory
- Vendor breaches linked to the vendor's DPA and assessment
Breach Notification and Response FAQ
At detection. The countdown stays open until both the Data Protection Board and the affected Data Principals are recorded as notified, and stops when the incident is closed.
When the incident occurred, was detected and was reported, its severity and status, the number of affected Data Principals, the assignee and any third-party vendor involved.
Yes. ConsultIQ has a Breach Notification template that drafts notifications to the supervisory authority and to affected data subjects.
Filter the DiscoverIQ Data Catalog by department, attribute and file name to scope the data involved, and record the number of affected Data Principals on the incident.
Security Incidents manages the response once an incident is identified. ProtectIQ, the IQWorks product for data loss prevention, is coming next.
Breach Notification and Response Resources
Regulations
Free Tools
Glossary
Data Breach Notification
Data breach notification is the legal requirement for organizations to inform supervisory authorities and affected individuals when a security incident results in unauthorized access to, or loss of, personal data.
Data Protection Board
A Data Protection Board is a regulatory body established to oversee and enforce data protection laws, such as the Data Protection Board of India under the DPDP Act or the European Data Protection Board under the GDPR.