First responses to a data security incident.

• Position: CAMICO Insurance: tip of the Month

Do not turn off or reboot any systems. First record critical facts regarding the incident: date and time the Incident was discovered, who discovered it, what occurred, what systems, applications and information were potentially compromised and what data elements were included, such as name, date of birth, Social Security number. Once these are recorded, the affected systems should be backed up or mirrored to enable future analysis.

Report the Incident Immediately. The firm will want to prevent further tosses and begin the repair and retrieval process right away. Some states require that clients be notified within a short period of time following the detection of a data loss.

Activate safeguards for protecting personal Information. A remote mobile device security service provides safeguards capable of...