When we look at benchmarking metrics for our privacy and incident response programs, it’s easy to focus on the trends that emerge: What is the majority doing on data breach notification? What is the mainstream response time or typical breakdown of incidents that are malicious versus unintentional? But this isn’t to say that lessons can’t be learned in examining the fringe cases. These data points can speak volumes to the culture of privacy within an organization. In the latest installment of this ongoing series on benchmarking your program for The Privacy Advisor, Mahmood Sher-Jan looks at the decision to provide voluntary notification of a data breach.
Full Story