Skip to main content

Topic

Incident Response

217 published works

  1. Data Privacy Dish

    Cyber Incident Response: 10 Lessons Learned from Thousands of Breaches

    By Reena Bajowala, Jena M. Valdetero

    Drawing on lessons learned from thousands of incident responses, this GT Advisory examines the most common and consequential mistakes organizations make when responding to a data breach. From lack of…

  2. The Data Advisor

    YellowKey Zero-Day and the BitLocker Bypass: Compliance and Incident Response Implications

    By Demian Ahn, Colin Black, Laura Brodahl, Tony Misher

    Key TakeawayA publicly disclosed and widely unpatched zero-day vulnerability, named YellowKey, permits anyone with physical access to a device running Windows 11 or Windows Server 2022/2025 to bypass BitLocker full-disk…

  3. Inside Privacy

    CISA Announces Revised Schedule of Town Halls for CIRCIA Rulemaking

    By Micaela McMurrough, Ashden Fein, Caleb Skeath, John Webster Leslie, Miranda Rutherford, Bryan Ramirez

    On May 26, 2026, the Cybersecurity & Infrastructure Security Agency (“CISA”), announced a revised schedule of virtual town halls as part of its rulemaking implementing the Cyber Incident Reporting for…

  4. The Formiti Privacy News Blog

    Data Breach Response Support That Works

    By Formiti

    Data breach response support that works — triage, risk assessment, GDPR/UK GDPR/Swiss notification analysis, evidence and remediation in one operational track.

  5. Workplace Privacy, Data Management & Security Report

    Proposed State Laws For Breach Notification Could Reshape Incident Response Plans

    By Joseph J. Lazzarotti

    State breach-notification laws continue to evolve, and legislatures are using 2026 sessions to tighten consumer protections and shift the civil liability landscape that often follows a cyber event. For businesses,…

  6. ComplexDiscovery

    A 48-month federal benchmark resets the incident-response insider question

    By Rob Robinson

    Editor’s Note: Federal sentencing has now placed a number on the kind of insider conspiracy that legal-tech and cybersecurity governance teams have been forecasting for two years. Ryan Clifford Goldberg,…

  7. Debevoise & Pimpton Data Blog

    2026 Cyber Trends and Incident Response Privilege – What Companies Need to Know

    By Oleksiy Pikhmanets

    Debevoise & Plimpton’s Data Strategy & Security (DSS) team is pleased to contribute to the Legal 500 Country Comparative Guides: Data Protection & Cybersecurity with a new “Hot Topic” chapter…

  8. Debevoise & Pimpton Data Blog

    Robert Maddox to speak at Incident Response Forum London 2026

    By Oleksiy Pikhmanets

    On Thursday, June 4, 7:20 AM – 8:05 AM EDT (12:20 PM – 1:05 PM BST), Robert Maddox will speak at Incident Response Forum London 2026 on a panel titled…

  9. Government Contracts Legal Forum

    FedRAMP Solicits Public Comment on Overhaul to Incident Communications Procedures

    By Kate Growley, Nkechi Kanu, Jessica Chao, Bryan Dewan, Jacob Harrison, Ajan Jayant

    Introduction The Federal Risk and Authorization Management Program (FedRAMP) continues to advance its modernization agenda. On April 8, 2026, FedRAMP released RFC-0031, Updated Incident Communications Procedures for public comment. This RFC proposes…

  10. ComplexDiscovery

    Twenty-Two Seconds to Hand-Off: Inside Mandiant’s M-Trends 2026 Findings

    By Rob Robinson

    Editor’s Note: Mandiant’s M-Trends 2026 report, grounded in over 500,000 hours of frontline incident response, delivers a set of findings that cybersecurity, information governance, and eDiscovery professionals should treat as…