Data Breach Response - Business Tips | Federal Trade Commission
Автор: FTCvideos
Загружено: 2016-10-13
Просмотров: 11352
You just learned that your business experienced a data breach. Find out what steps to take and who to contact if personal information is exposed.
********************************************
Transcript:
[MUSIC PLAYING] A company laptop has disappeared. An employee sees unusual behavior on your network. A customer calls, fearing identity theft. You suspect a data breach. What do you do?
In this video and in a written guide, the Federal Trade Commission offers steps for protecting your company, preventing additional damage, and helping your affected employees, customers, and partners reduce their risk. It's important to take action immediately, even if you don't know the cause of the breach or the full damage. It's time to secure operations, fix vulnerabilities, and notify appropriate parties. Ready?
First, secure your operations. Don't let one data breach become many. Rally your response team. It may include legal, IT, finance, HR, communications, or others. You also may enlist outside forensic experts to help you investigate the cause, understand the impact, and start fixing the problem. Take affected equipment, like servers, offline right away, and quickly remove any information that was improperly posted online. Secure physical areas related to the breach, and consider changing employee and customer logins.
Also, fix vulnerabilities. Review all the data on your system. And this goes beyond Social Security and credit card numbers. If you store any customer or employee data, your customers, employees, and your company are at risk.
Do any vendors have access to your system? Ensure and verify that they are following the proper security practices. Consider changing their access privileges. Notify the appropriate parties. Call law enforcement immediately. The sooner they learn about the breach, the more effective they can be.
It's important to let people know what happened and what their rights are. Under the law, you have reporting and notification responsibilities. The FTC's Data Breach Response guide offers a model letter that can help you with these notifications. Be sure to include current guidance on recovering from identity theft, and encourage those who discover that their information has been misused to visit identitytheft.gov.
If you suspect a data breach, a swift, appropriate response is good for the people who have been impacted, and for your business. Learn more about the immediate steps you can take, plus ways to prevent breaches and protect consumer data, at ftc.gov/databreach.
********************************************
The Federal Trade Commission deals with issues that touch the economic life of every American. It is the only federal agency with both consumer protection and competition jurisdiction in broad sectors of the economy. The FTC pursues vigorous and effective law enforcement; advances consumers' interests by sharing its expertise with federal and state legislatures and U.S. and international government agencies; develops policy and research tools through hearings, workshops, and conferences; and creates practical and plain-language educational programs for consumers and businesses in a global marketplace with constantly changing technologies.
Comment Moderation Policy
We welcome your comments and thoughts about the information on this page. If you do have something to say, please be courteous and respectful to other commenters. We won't routinely review or edit any comments before they are posted, but we will delete any comments that:
1) contain spam or are off-topic
2) use vulgar language or offensive terms that target specific groups or contain personal attacks
3) are sales pitches, promotions, urls or links to commercial sites
4) spread clearly misleading or false information
or
5) include personal information, like home addresses
Доступные форматы для скачивания:
Скачать видео mp4
-
Информация по загрузке:
