Data Breach Response Playbook

To: incident@cert-in.org.in Subject: Cyber Security Incident Report - [Company Name] Date/Time of Incident: [DD/MM/YYYY HH:MM IST] Date/Time of Detection: [DD/MM/YYYY HH:MM IST] Type of Incident: [Data Breach / Unauthorized Access / Ransomware] INCIDENT DETAILS: 1. Nature: [Brief description] 2. Systems Affected: [Server/Database/Application] 3. Data Compromised: [Type and volume] 4. Estimated Impact: [Number of records/individuals] 5. Attack Vector: [If known] CONTAINMENT MEASURES: [Actions taken to contain breach] CONTACT: Name: [CISO/DPO Name] Phone: [Number] Email: [Email] [Signature]

Subject: Important: Notice of Data Security Incident Dear [Name], We are writing to inform you of a data security incident that may have affected your personal information. WHAT HAPPENED: On [Date], we discovered unauthorized access to our systems containing personal data. WHAT INFORMATION WAS INVOLVED: The following categories of your data may have been affected: - [Name, Email, Phone, etc.] WHAT WE ARE DOING: 1. Contained the incident and secured our systems 2. Engaged forensic investigators 3. Reported to relevant authorities 4. Enhanced security measures WHAT YOU CAN DO: 1. Monitor your accounts for suspicious activity 2. Change passwords for related accounts 3. Be cautious of phishing attempts CONTACT US: For questions, contact our Data Protection Officer: Email: [dpo@company.com] Phone: [Helpline number] We sincerely apologize for this incident. [Signature]