9.1.1.12. Data Security Details

In this section of the Create New Incident form, users can document the data security aspects of the incident.

*This type of incident involves breaches or vulnerabilities that compromise the confidentiality, integrity, or availability of data.

*For guidance on common form functions, please refer to the dedicated section in the manual.

1. Was There a Loss of Data?: A checkbox for indicating if there was a loss of data as a result of the incident.
   • Selecting this checkbox reveals the following field:
     
     • Were the Impacted Customers Advised?: A checkbox for indicating if the impacted customers were advised about the data loss.
2. Type of Incident: This checkbox set allows users to specify the type of data security incident. Users can select one or more options from the following:
   • Denial of Service: Select if the incident involves a denial of service attack.
     

     **During a denial-of-service attack, a malicious actor floods a network or system with an excessive volume of traffic, leading to a slowdown or complete system crash. These attacks are commonly directed towards well-known entities such as banks or government institutions, aiming to disrupt their operations and incur financial losses. However, it’s essential to note that organizations of varying sizes can fall victim to such assaults.

   • Malware: Select if the incident involves malicious software (malware).
   • Network Scanning Problem: Select if the incident is related to issues with network scanning.
   • Social Engineering: Select if the incident involves social engineering tactics.
     

     **Social engineering refers to a set of tactics used to manipulate individuals into revealing confidential information or performing actions that compromise security. Examples include phishing, pretexting, and impersonation.

   • System Misuse: Select if the incident involves improper use of a system.
   • Technical Vulnerability: Select if the incident stems from a technical vulnerability.
   • Unauthorized Access: Select if the incident involves access by unauthorized individuals.
   • Virus / Malicious Code: Select if the incident involves a virus or malicious code.
   • Other: Select if the incident falls outside the predefined categories.
     • Selecting this checkbox reveals the following field:
       
       • Indicate the Nature of the Incident: A text field for specifying the nature of the incident.
3. Describe the Impact Assessment: A rich text field for describing the impact of the data security incident.
4. Relevant Documents (Optional): A file attachment field for uploading documents related to the data security incident.