In a previous installment of this benchmarking series for The Privacy Advisor, Radar’s Mahmood Sher-Jan discussed the differences in incident classification when using intent as a filter. Was the incident resulting from intentional, malicious actions? Intentional but not malicious? Or was the incident simply unintentional and inadvertent in nature? Classifying incidents and breaches by intent serves as an important factor in assessing the severity of the incident and how an organization will determine the potential risk of harm to affected individuals. In this installment of the ongoing series, Sher-Jan returns to the topic to dig deeper into incident-intent classifications and how they can be further broken down into specific scenarios. Editor's Note: The Privacy Advisor's Angelique Carson, CIPP/US, will host a panel on benchmarking privacy programs at Privacy. Security. Risk.
If you want to comment on this post, you need to login.