Incident Response Notification Procedure updated 6/3/2024

Incident Response Notification Procedure

1. Incident Detection and Notification

In the unlikely event of a data breach, LobbyCentral will promptly detect and verify the incident. Upon confirmation, the following steps will be taken:

1. Immediate Notification: As soon as LobbyCentral becomes aware of the breach, we will notify all affected customers via email or other appropriate channels. Transparency is our priority, and we will provide relevant details about the incident, including its nature and potential impact.
2. Investigation Launch: Our dedicated incident response team will initiate an investigation. This team comprises experts from various disciplines, including technical, legal, and communications. Their goal is to assess the situation thoroughly and determine the extent of the breach.

2. Incident Analysis and Scope Assessment

1. Impact Assessment: We will evaluate the impact of the breach on affected individuals and systems. This assessment includes identifying compromised data, potential risks, and any regulatory obligations.
2. Evidence Gathering: Our team will collect evidence related to the breach. This may involve analyzing logs, reviewing system configurations, and collaborating with relevant stakeholders.
3. Scope Determination: We will define the scope of the incident—whether it affects specific accounts, services, or the entire system. Understanding the scope helps us tailor our response effectively.

3. Containment, Eradication, and Recovery

1. Containment: We will isolate affected systems or networks to prevent further damage. This step aims to limit the breach’s impact and prevent its spread.
2. Eradication: Our experts will identify and eliminate the root cause of the breach. This may involve patching vulnerabilities, removing malicious code, or strengthening security controls.
3. Recovery: LobbyCentral will work diligently to restore affected services to normal operation. We understand the importance of minimizing downtime and ensuring continuity for our customers.

4. Post-Incident Review and Improvement

1. Lessons Learned: After resolving the incident, we will conduct a thorough review. Our team will document lessons learned, identify areas for improvement, and update our incident response plan accordingly.
2. Continuous Enhancement: LobbyCentral remains committed to enhancing our security practices. We regularly update our incident response procedures, train our staff, and collaborate with industry experts to stay ahead of emerging threats.