Incident Response and Data Breach Plan

This Plan covers security, privacy, availability, integrity and cross-company-access incidents.

1. Reporting and severity

Report to support@isoweld.com.au. Critical events include cross-company access, broad credential compromise, destructive attack or major outage.

2. Initial actions

1. Open an incident record and assign an owner.
2. Preserve logs and evidence.
3. Identify affected systems, Customers and information.
4. Contain without destroying evidence.
5. Escalate to providers, advisers or insurers.

3. Containment

Actions may include revoking sessions, rotating secrets, blocking traffic, disabling integrations or isolating modules.

4. Assessment

Determine cause, access, disclosure, loss, modification, likely harm and affected people.

5. NDB and communication

Assess under the OAIC NDB guidance where applicable. Communicate facts without speculation and no universal 72-hour promise.

6. Recovery and review

Restore from a trusted state, verify integrity and tenant isolation, monitor recurrence, document root cause and track corrective actions.

7. Exercises

Test scenarios including cross-company access, ransomware, host failure and exposed credentials.

Contact