Data Breach Planning In 10 Easy Steps: How To Think Like A Litigator

For the first Monday in November, we have 10 easy steps to make sure that your data breach incident response planning is viewed from that pesky point of view of a litigator.

1. Fail to plan = plan to fail.
2. Big problems first, small problems later (don’t let the perfect be the enemy of the good).
3. The criticality of the tone at the top cannot be overstated.
4. You cannot prevent idiocy, but you can train (and retrain, and retrain).
5. Make good email practices your fight song (in both times of calm, and times of crisis).
6. Say what you mean and mean what you say (avoid good policies with poor follow-through; don’t set standards that you can’t meet).
7. Avoid inconsistencies wherever possible.