1. Incident Identification

• We monitor systems, logs, and alerts for indicators of unauthorised access, disclosure, alteration, loss, or destruction of data.
• Employees and contractors are required to report suspected breaches or security anomalies immediately through defined escalation channels.

2. Containment and Assessment

Once a suspected breach is identified, we initiate incident response procedures to contain the issue, assess scope and impact, determine affected data categories, and evaluate whether personal data has been compromised.

3. Notification Obligations

Where required by law, regulation, or contract, we notify relevant clients, partners, supervisory authorities, and affected individuals within the required timelines and with the best available information at the time.

4. Remediation and Recovery

• We remediate vulnerabilities, revoke compromised access, and restore systems in a controlled manner.
• We document corrective actions and strengthen safeguards to reduce the likelihood of recurrence.
• We preserve incident records for audit, legal, and continuous-improvement purposes.

5. Post-Incident Review

After significant incidents, we conduct a formal review to identify root causes, update procedures, and improve detection, response, and governance controls.