Topic
Incident Response
217 published works
Inside Privacy
NIST Publishes Updated Incident Response Recommendations and Considerations
By Ashden Fein, Micaela McMurrough, Caleb Skeath, Moriah Daugherty, Sierra Stubbs, Krissy Chapman
Earlier in April, the U.S. National Institute of Standards and Technology (“NIST”) published Special Publication (“SP”) 800-61, Incident Response Recommendations and Considerations for Cybersecurity Risk Management, Revision 3 (“NIST SP…
Pretrial, Trial, Appellate & Evidence Blog
Ronald H. Clark Interview Published on: 30, Apr 2025
With over 27 years of experience in the King County Prosecutor's office, Professor Clark has built a prominent career in legal…
Online and On Point
HHS’s Proposed Security Rule Updates Will Require Adjustments to Accommodate Modern Vulnerability and Incident Response Issues
By Eric Setterlund, Brett Lawrence
In this week’s installment of our blog series on the U.S. Department of Health and Human Services’ (HHS) HIPAA Security Rule updates in its January 6 Notice of Proposed Rulemaking…
The Relativity Blog
Rapid Post-Incident Notifications: A Key to Effective Cybersecurity Incident Response
By Relativity
Understanding the intricacies of a data breach response and the ensuing notification protocols is crucial. Let's unpack the complexities of these projects and how Relativity can streamline them.
Regulatory Oversight
Notifying Law Enforcement of Security Incidents
Dear Mary, I recently experienced a security incident at my company and am considering whether to report it to law enforcement. While I want to cooperate and help catch the…
Regulatory Oversight
Ensuring Proper Legal Involvement in the Incident Response Process
Dear Mary, I'm the general counsel of an organization and have recently started getting involved in the cybersecurity side of things. As I'm getting my bearings, I've noticed that our…
Consumer Financial Services Law Monitor
Ensuring Proper Legal Involvement in the Incident Response Process
Dear Mary, I'm the general counsel of an organization and have recently started getting involved in the cybersecurity side of things. As I'm getting my bearings, I've noticed that our…
Regulatory Oversight
Understanding Breach Notification Obligations Under California Law: What Does the CCPA Require?
Dear Mary, I am the privacy compliance officer at a cloud-based software company. We recently experienced an incident where, although none of our client's data was compromised, it appears that…
Workplace Privacy, Data Management & Security Report
The Broadening Data Security Mandate: SEC Incident Response Plan and Data Breach Notification Requirements
By Damon W. Silver, Melissa Pascualini
Virtually all organizations have an obligation to safeguard their personal data against unauthorized access or use, and, in some instances, to notify affected individuals in the event such access or…
Regulatory Oversight
Preserving Forensic Artifacts Following Incident Detection
Dear Mary, One of our employees recently fell victim to a phishing attack, allowing unauthorized access to their email account for a brief period. To be safe, we reset everyone's…