Basics of Cybersecurity and Data Privacy Incident Response Counseling

Active

Program Number

34149

Program Date

2024-09-09

CLE Credits

This course examines data privacy and cybersecurity incidents from a response perspective. The presentation will spotlight three primary components of the incident response lifecycle:

Investigation and verification of a breach
Breach notification
Post-breach remediation

With a focus on state data breach notification statutes, the course explores core questions involving events impacting protected information, such as:

What is considered “personal information”?
How can personal information become “breached”?
What is the risk of harm to personal information following an incident?

When an incident is determined to be a “breach,” organizations often need to take prompt action to ensure compliance with state and federal law. This lecture considers what happens when a “breach” is declared, including notification to impacted individuals. Finally, the course explores common avenues organizations may consider to prevent a breach from happening again in the future, including the development and implementation of cybersecurity training and awareness programs.

Course Objectives:

Identify common types of cybersecurity and data privacy incidents
Explore the concept of personal information
Understand a “breach” as a legal term of art
Identify statutory requirements following a breach, such as incident notification
Understand common methods of post-breach remediation