Deployment/Security/Privacy and data protection: Difference between revisions

* '''Have a breach-response plan''' before you need it: how an incident is detected, contained, assessed, and communicated.

* '''Know your notification obligations''' — most regimes require notifying the authority and affected individuals within a defined window. Build the contacts and timelines into the plan in advance.

Pair these practices with the technical controls in [[Deployment/Security/Data security|Data security]], and revisit both whenever your deployment, your data flows, or your regulatory environment changes.

{{Related}}