Cyber Breach Comms Cards
Use quick-reference cards to communicate cyber incidents with evidence discipline.
CLEAR What should every cyber incident update make CLEAR? Accessed or exposed? Choose the verb your evidence can support today. We should say no customer data was stolen because we have not found exfiltration. Say we have not found evidence of exfiltration so far, and the review is ongoing. Absence of evidence today is not final proof. No evidence can sound like proof when the investigation is still young. It preserves credibility if later forensic findings change. What customer action belongs in many early breach updates? A reasonable precaution such as password reset, MFA enablement, or phishing vigilance. The action…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in