From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 23,200 courses taught by industry experts.

Data breaches

Data breaches

- [Narrator] Data breaches can have serious consequences for an organization. An organization suffering a data breach might experience reputational damage, become the source of identity theft incidents, suffer fines, or lose intellectual property to theft. For these reasons, the security policies of many organizations require immediate escalation to senior management of any incident that involves a breach of sensitive data. In the unfortunate event of a known or suspected data breach, information security professionals have a range of responsibilities dictated by laws and regulations like many other security and privacy regulations. In the United States, data breach laws are a patchwork of regulations that apply in different ways. Some rules apply to specific industries such as HIPAA for the healthcare industry, PCI DSS for the credit card industry, and the Sarbanes Oxley Act for publicly traded companies. Other rules apply to specific jurisdictions such as the state by state data…

Contents