title: Preventing a data breach from becoming a disaster.
abstract: Organisations have traditionally dealt with data breaches by investing in protective measures without a great deal of attention to mitigation of breach consequences and response. Conversely, business continuity (BC) planning has traditionally focused on mitigating disasters, not on preventing them. From a BC planning perspective, organisations need to assume that a data breach is inevitable and plan accordingly. The spate of data breaches in these past few years hit many organisations that were well protected. Those that suffered disastrous consequences as a result of a data breach lacked effective mitigation and response, not protection. The complexity and speed of an effective data breach response require that detailed planning takes place in advance of a breach.
authors.affiliation: Northeast Utilities, Berlin, CT 06037, USA. edward.goldberg@nu.com
authors.forename: Ed
authors.initials: E
authors.lastname: Goldberg
mesh_terms: D003132:Commerce; D003142:Communication; D016494:Computer Security; D004189:Disaster Planning; D004282:Documentation; D006801:Humans; D014481:United States