Gain insight into the potential severity of an incident or breach by understanding if affected data contained personally identifiable information (PII) or other sensitive information, which data subjects were affected, associated data processing activities, record types and other critical information. Significantly reduce investigation time and associated costs.
Incident & Breach Management
Be confident that your incident and breach response is both documented and defensible
Related products
Description
Exterro Incident and Breach Management™ is an integrated solution that enables you to be confident that your incident and breach response process is both documented and defensible. Leveraging the NIST Standards Playbook, this solution bridges the gap between Information Security, IT and your Legal team to ensure a comprehensive and documented process. It eliminates current ad-hoc, risky approaches, delivering greater predictability, transparency and speed to resolution. Our powerful workflow engine enables you to easily create a complete response that incorporates differing local or global requirements based on the affected data and constituents. Flexible reporting delivers unparalleled insight into the incident and your response.
Features & Capabilities
Highly tailorable workflow templates manage the entire process, from initial risk assessment, automated notification delivery and remediation activities.
Seamless integration with your HR system empowers legal counsel to craft precise stakeholder distribution lists, taking into account various factors, including type of incident, affected applications, governing jurisdictions and global breach law notification requirements.
Easily reference regulatory obligations to ensure compliant response processes.
Customizable portal can gather information about incidents from internal and external parties. Incident workflow varies by incident type.
Utilize a secure communication system separate from potentially compromised corporate systems. Eliminate shadow communications, and retain control of participation. Enables legal counsel to supervise the response process, and can be used to structure communications such that privilege may be asserted if necessary.