Incident Reporting Process
What to do if you suspect account or data issues.
When incidents happen, speed and documentation matter.
Response flow:
1. Contain access risk (password reset, session review, access removal).
2. Record what happened, when, and affected records.
3. Notify internal stakeholders and impacted users as required.
4. Capture remediation steps and prevent recurrence.