[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-174248-en":3,"doc-seo-174248-105":29,"detail-sidebar-cat-1-en-105":90},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":11,"category_id":12,"category_name":13,"doc_title":14,"doc_description":15,"doc_content":16,"file_id":17,"file_url":18,"file_type":19,"file_size":20,"view_count":21,"is_deleted":4,"is_public":11,"is_downloadable":11,"audit_status":11,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":15,"update_tm":28,"read_time":11},174248,2336474466412,"\tJames","https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d",1,18,"Letters","Sample Template for Data Breach or Imminent Breach Procedures - Policy and Procedures","Sample policy template detailing agency procedures for responding to a data breach or an imminent breach involving personally identifying information (PII) or other confidential data stored on personal computers, agency networks, or staff-used internet programs. Defines key staff roles for implementing actions, prevention controls for breach and PII exposure, identification of critical systems for scheduled backups, and containment steps such as disconnecting affected systems, notifying responders, documenting incident details, removing malware, and coordinating notifications within 24 hours.","Sample Template for Data Breach or Imminent Breach Procedures\n(AGENCY) Data Breach Policy and Procedures\n(AGENCY) has implemented the following procedures to follow in the event of a data breach involving personally identifying information (PII) or other confidential information maintained on personal computers, agency networks, or internet programs used by staff and volunteers.\nThe following staff have key responsibility for implementing and executing the data breach procedures:\n(FIRST RESPONDER) (CONTACT PHONE NUMBERS)\n(SECOND RESPONDER) (CONTACT PHONE NUMBERS)\n(THIRD RESPONDER) (CONTACT PHONE NUMBERS)\nIn an effort to prevent a breach of data and PII, (AGENCY) has implemented the following measures to prevent the breach of data:\n(TECHNICAL SUPPORT SERVICE PROVIDER)\n(INSTALLED ANTI-VIRUS, INTRUSION NOTIFICATION SOFTWARE)\n(AGENCY PROCEDURES FOR PERSONAL ACCESS AND USE OF AGENCY COMPUTERS)\n(LAW ENFORCEMENT SUPPORT TO LOCATE AND APPREHEND PERPEETRATORS.\n(AGENCY) has identified the following items as critical systems and files that will be uploaded to a back-up system on a (DAILY/WEEKLY/MONTHLY) basis:\n(CLIENT DATA FILES)\n(CLIENT CASE FILES)\n(AGENCY FINANCIAL RECORDS)\n(OTHER CRITICAL/CONFIDENTIAL INFORMATION)\nIn the event of a data breach or imminent breach of PII data, in order to contain the data breach and minimize the extent of the intrusion:\nDisconnect the affected and related systems or networks from Internet access.\nContact (1st/ 2nd/3rd RESPONDER) to notify them of the data breach or imminent breach of PII data.\nDocument date and time the breach occurred, what files the user was accessing at the time of the breach, the breach team member contacted, and actions taken to secure data.\nContact technical support to detect and remove the malware or other information related to the breach.\nNotify the staff at GCC within 24 hours of the breach occurrence or detection of breach/recognition of imminent breach.\nReview virus/malware/other protective software to review system vulnerabilities and increase the level of protection for the system.\nIf possible, reimage the system and restore from backup files.\nWithin 24 hours of the breach the Project Director (NAME or DESIGNATED STAFF) must notify the staff at GCC of the data breach, to forward the information to appropriate staff at the federal funding level.\nFollowing the incident, (AGENCY) staff will review procedures to determine if any actions by the user or the team contributed to the data breach.  Staff will be updated on policies to protect against data breaches or imminent breaches of PII data.\nA computer technician will review software, updates, and software/data protection programs to improve the security of the data and operating system to prevent further incidents. Information related to the data breach will be documented on the incident log, repairs or modifications implemented will be included on the log and kept in a secure location.\nIf necessary, the management team will review procedures and make necessary changes to the procedures to improve the security of PII and other secure information.","cbCaiko8f1qrivik","https://ap.wps.com/l/cbCaiko8f1qrivik","docx",21638,2,"English","en",105,"# Data Breach Policy and Procedures\n## Roles and Responsibilities\n## Prevention Measures\n## Critical Systems and Backup Schedule\n## Containment and Response Steps\n## Post-Incident Review and Documentation","[{\"question\":\"Who is responsible for implementing and executing the data breach procedures?\",\"answer\":\"The template assigns key responsibilities to a first responder, second responder, and third responder to implement and execute the procedures.\"},{\"question\":\"What prevention measures are included to reduce the risk of a data breach and PII exposure?\",\"answer\":\"Prevention measures include technical support services, installed anti-virus and intrusion notification software, personal access and use procedures for agency computers, and other agency procedures to strengthen controls.\"},{\"question\":\"What steps should be taken to contain a data breach or imminent breach of PII?\",\"answer\":\"Containment includes disconnecting affected systems or networks from the internet, notifying responders, documenting date/time and accessed files, contacting technical support to remove malware, and notifying staff at GCC within 24 hours.\"}]","Sample Template for Data Breach or Imminent Breach Procedures - Policy and Procedures | DOCX",1788311425,{"code":4,"msg":30,"data":31},"ok",{"site_id":24,"language":23,"slug":32,"title":14,"keywords":33,"description":15,"schema_data":34,"social_meta":85,"head_meta":87,"extra_data":89,"updated_unix":28},"sample-template-for-data-breach-or-imminent-breach-procedures-policy-and-procedures","",{"@graph":35,"@context":84},[36,52,67],{"@type":37,"itemListElement":38},"BreadcrumbList",[39,43,46,49],{"item":40,"name":41,"@type":42,"position":11},"https://docshare.wps.com","Home","ListItem",{"item":44,"name":45,"@type":42,"position":21},"https://docshare.wps.com/template/","Template",{"item":47,"name":13,"@type":42,"position":48},"https://docshare.wps.com/template/letters/",3,{"item":50,"name":14,"@type":42,"position":51},"https://docshare.wps.com/template/sample-template-for-data-breach-or-imminent-breach-procedures-policy-and-procedures/174248/",4,{"url":50,"name":14,"@type":53,"author":54,"headline":14,"publisher":56,"fileFormat":59,"inLanguage":23,"description":15,"dateModified":60,"datePublished":61,"encodingFormat":59,"isAccessibleForFree":62,"interactionStatistic":63},"DigitalDocument",{"name":9,"@type":55},"Person",{"url":40,"name":57,"@type":58},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-09-05","2026-09-02",true,{"@type":64,"interactionType":65,"userInteractionCount":48},"InteractionCounter",{"@type":66},"ViewAction",{"@type":68,"mainEntity":69},"FAQPage",[70,76,80],{"name":71,"@type":72,"acceptedAnswer":73},"Who is responsible for implementing and executing the data breach procedures?","Question",{"text":74,"@type":75},"The template assigns key responsibilities to a first responder, second responder, and third responder to implement and execute the procedures.","Answer",{"name":77,"@type":72,"acceptedAnswer":78},"What prevention measures are included to reduce the risk of a data breach and PII exposure?",{"text":79,"@type":75},"Prevention measures include technical support services, installed anti-virus and intrusion notification software, personal access and use procedures for agency computers, and other agency procedures to strengthen controls.",{"name":81,"@type":72,"acceptedAnswer":82},"What steps should be taken to contain a data breach or imminent breach of PII?",{"text":83,"@type":75},"Containment includes disconnecting affected systems or networks from the internet, notifying responders, documenting date/time and accessed files, contacting technical support to remove malware, and notifying staff at GCC within 24 hours.","https://schema.org",{"og:url":50,"og:type":86,"og:title":14,"og:site_name":57,"og:description":15},"article",{"robots":88,"canonical":50},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":91},[92,97,102,107,112,117,122,125,130],{"id":93,"doc_module":11,"doc_module_name":45,"category_name":94,"show_sort_weight":95,"slug":96},11,"Presentations",90,"presentations",{"id":98,"doc_module":11,"doc_module_name":45,"category_name":99,"show_sort_weight":100,"slug":101},12,"Resumes",80,"resumes",{"id":103,"doc_module":11,"doc_module_name":45,"category_name":104,"show_sort_weight":105,"slug":106},14,"Invoices",70,"invoices",{"id":108,"doc_module":11,"doc_module_name":45,"category_name":109,"show_sort_weight":110,"slug":111},15,"Posters",60,"posters",{"id":113,"doc_module":11,"doc_module_name":45,"category_name":114,"show_sort_weight":115,"slug":116},16,"Social Media",50,"social-media",{"id":118,"doc_module":11,"doc_module_name":45,"category_name":119,"show_sort_weight":120,"slug":121},17,"Forms",40,"forms",{"id":12,"doc_module":11,"doc_module_name":45,"category_name":13,"show_sort_weight":123,"slug":124},30,"letters",{"id":126,"doc_module":11,"doc_module_name":45,"category_name":127,"show_sort_weight":128,"slug":129},21,"Paper Templates",5,"papers-templates",{"id":131,"doc_module":11,"doc_module_name":45,"category_name":132,"show_sort_weight":4,"slug":133},158,"General","general-158"]