Incident Response Plan

A data or security breach can be devastating to an organization’s reputation, brand, and relationship to its consumers, partners, and staff.  Even with the tightest security and safety measures, an organization can experience a data breach. It is not a matter of “if,” but “when.” 

Damage to the reputation of the breached institution may be even more difficult to prevent than any financial losses because it is heavily dependent upon the company’s image, brand, and its relationships with customers. While data breaches can cost millions of dollars to repair because of fines, security upgrades, and notification efforts, reputation is one asset that can seldom be measured in dollars. 

Since there are no guarantees, pre-planning is the key to being prepared for the unexpected, and poised for swift prudent action to begin the recovery process.

Kroll's Incident Response Plan (IRP) is documented to provide a well-defined, organized approach for handling any incident where sensitive personal information is compromised and will provide an outline and recommendations for planning and executing a well-orchestrated response to a data compromise.

This Plan identifies and describes the roles and responsibilities of the Incident Response Team. With this Incident Response Plan and Kroll as your partner, you have a solid plan and a tested support structure in place when a data breach incident does occur. This plan identifies and describes the roles and responsibilities of the Incident Response Team – a multifaceted team from our organization to put the plan into action, address the issues, and mitigate the problems associated with a data breach. 

Kroll's Incident Response Plan provides for the following:

• The concern;
• Definition of a data compromise incident;
• Types of incidents; and
• Developing your IRP.