iro-041-databreach.md

SCF - IRO-04.1 - Data Breach

Mechanisms exist to address data breaches, or other incidents involving the unauthorized disclosure of sensitive or regulated data, according to applicable laws, regulations and contractual obligations.

Mapped framework controls

GDPR

• Art 33.1
• Art 33.2
• Art 33.3
• Art 33.4
• Art 33.5

ISO 27002

• A.5.25

SOC 2

• CC7.3
• P6.3
• P6.6
• P6.7

Control questions

Does the organization address data breaches, or other incidents involving the unauthorized disclosure of sensitive or regulated data, according to applicable laws, regulations and contractual obligations?