The point of any data-related strategy is to avoid incidents, to design them out. But as that great philosopher of information governance Donald Rumsfeld once said: stuff happens. So what do you do when it does?

You put into place your clear, well-considered plans. Your staff identify and report the incidents you want to know about. Your plan to contain and mitigate the effects of an incident kick in, and you objectively investigate what went wrong.

If necessary or wise, you inform the Information Commissioner and the affected people. In short, you acknowledge that stuff happens and you get ready for it. This session will help.

Course includes:

• Crucial steps to avoid security and other incidents

• What kinds of incidents you should monitor for?

• Setting up process for internal reporting

• Investigating and containing incidents

• Reporting incidents to the Commissioner and affected subjects

• Criminal offences including obtaining and retaining without the controller’s authorisation