All the materials you need to implement an effective response process for privacy and security incidents that is consistent with state breach-notification standards, the PCI Data Security Standard, Canada's new breach-response guidelines, and other external standards. Files that are in the CD-ROM package include:

1. Incident response process and templates.  Over 700 pages of detailed flowcharts for over 60 privacy-related incidents.  Start at the portal page, choose the breach, and click through the detection, investigation, notification, and litigation phases of a breach.  Includes comparisons of vendors for forensics, letter printing, call centers, and credit monitoring; templates for notification letters and call center scripts; and much more.
2. Information incident project-plan template.  A pre-populated Excel spreadsheet ready to assign tasks to response-team members.
3. Inventory of laws on breach notification.  A comparison of the notification triggers in U.S. state laws, updated to include non-US laws as they become enacted. Includes a comprehensive single-page reference of all state laws printable up to poster size. More detailed and current than anything available online.
4. Executive tabletop materials.  Over 20 slides to use with your executive committee to increase the visibility of decisions they’ll need to make.  Scenario is modeled after the TJX breach, and includes key decision points that alter the outcome based on decisions made.
5. Inventory of publicized privacy and security incidents.  A list of breaches from 1997, categorized by root cause for quick analysis. More comprehensive than anything available online.
6. Publicized privacy and security incident timelines. A set of highly graphical, printable timelines from actual incidents that illustrate the cycle from breach to investigation, notification, and litigation.    
7. Econometric analysis of security breaches.  An MPC-commissioned study measuring the impact on stock price of publicly announced breaches.  Variables include type of breach, number of affected individuals, and size of company.
8. Cost of Breach Calculator™. Detailed line items for breaches ranging from 100 records to 20 million.  Incorporates conservatively estimated and realistic costs, taking a unique approach of combining fixed and variable costs, where others simplistically multiply the cost-per-record by the number of records.   

    

For the cost of two days of a consultant, or sending two staff to a high-level conference on security breaches, the Privacy Incident Response Plan ™ provides a month’s worth of work from seasoned privacy, forensics, and legal experts.  In addition, organizations who purchase the plan will also receive significant updates to the materials resulting from the rich input provided by other users.

For those who already have a process in place and need to round out their response materials, the modules of the Privacy Incident Response Plan ™ may be obtained individually. More Information

To learn more about the Privacy Incident Response Plan ™ e-mail us or call (612) 235-7361.

For sale to corporate practitioners only. Consulting firms, law firms, think tanks, media organizations, and other companies engaged in advising other companies on data privacy and security may only purchase this product under limited conditions. Contact us for more details if you believe you fall into this category.