Articles tagged “Incidents”
16 min read
A breach at your supplier: how to chain their notice to your notification
When the breach happens at your processor, notifying the supervisory authority is still your job, and your 72 hours start, in principle, when the processor tells you. What the GDPR, the EDPB and the Spanish AEPD say, what to put in the contract, what to ask on the first call and an hour-by-hour example.
GDPRIncidentsThird-party management
12 min read
When is an incident major under DORA? Criteria, thresholds and five worked cases
Under DORA, an ICT-related incident is major if it affects critical services and either there was malicious unauthorised access that may cause data losses, or two or more materiality thresholds are met. The exact thresholds, how to measure them and five cases classified step by step.
DORAIncidents