Ledger 15: Breaches and incident response
When student data is exposed: how to tell a breach from an incident, who is told, in what order, and what the record must show afterwards.
The ledger guide
Working guides on this ledger
Breaches and incident response Breach Communication Without Overpromising Breach Communication Without Overpromising explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response Breach Documentation and the After-Action Record Breach Documentation and the After-Action Record: what it means for a exposed student record, who may use it, and the check to make before it moves. Breaches and incident response Breach Forensics for College Systems Breach Forensics for College Systems explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response Breach Notification Timelines Across Laws Breach Notification Timelines Across Laws explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response Breach Versus Incident: The Distinction That Matters Breach Versus Incident: The Distinction That Matters: what it means for a exposed student record, who may use it, and the check to make before it moves. Breaches and incident response Containment for a Compromised Student System Containment for a Compromised Student System explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response Credit Monitoring Offers After a Breach Credit Monitoring Offers After a Breach explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response Notifying Students After a Breach Notifying Students After a Breach: what it means for a exposed student record, who may use it, and the check to make before it moves. Breaches and incident response Notifying the Department of Education and Regulators Notifying the Department of Education and Regulators explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response Post-Breach Review and Control Changes A plain-language guide to post-breach review and control changes: the record, the purpose, the authority and the safeguard. Breaches and incident response Ransomware and Student Records A plain-language guide to ransomware and student records: the record, the purpose, the authority and the safeguard. Breaches and incident response Repeated Incidents and the Pattern Problem Repeated Incidents and the Pattern Problem explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response The First Hour After a Student Data Breach The First Hour After a Student Data Breach explained for colleges: the rule, the exceptions, and the record an institution should keep. Breaches and incident response Vendor Breaches Affecting Student Data Vendor Breaches Affecting Student Data: what it means for a exposed student record, who may use it, and the check to make before it moves.