Market Research Logo

The CIO's Playbook: Preparing for Data Breach Notifications

The CIO's Playbook: Preparing for Data Breach Notifications

This IDC Perspective discusses the requirements governing the notification of affected individuals by organizations that experience a data breach. It includes nine pieces of critical knowledge for technology and business leaders to consider as they determine the criteria under which they will notify individuals of a known or suspected breach and the actions they should take to rebuild consumer confidence."The days and hours immediately after a data breach are critical," said Mike Chapple, adjunct research analyst with IDC's IT Executive Programs (IEP). "Organizations that suffer a data breach should quickly take action to rebuild the confidence of affected individuals and shape the message shared with the media. Mistakes made early in the process can cause financial and reputational damage with lasting impact."

Please Note: Extended description available upon request.


Executive Snapshot
Situation Overview
Critical Knowledge for CIOs
Most Oversight Comes Through State Laws
Key Takeaways
Federal Laws in the United States Cover Specific Niches
Key Takeaways
Private Contractual Obligations Impose Burdens
Key Takeaways
International Regulations Are Far Ahead of the United States
Key Takeaways
Encryption Is a Silver Bullet
Key Takeaways
Even When Laws Don't Apply, Reputations Are Still at Risk
Key Takeaways
Notification Is Costly
Key Takeaways
Data Breach Financial Impacts Can Be Significant
Key Takeaways
Breach Notifications Are Operationally Complex
Key Takeaways
Advice for the Technology Leader
Learn More
Related Research
Synopsis

Download our eBook: How to Succeed Using Market Research

Learn how to effectively navigate the market research process to help guide your organization on the journey to success.

Download eBook

Share this report