If something goes wrong with your data.

1. Detect. Someone notices, or an alert fires. Whoever notices reports it to the incident lead the same day.
2. Contain. We stop the harm first. That can mean ending sessions, switching off a connection, or pausing a send.
3. Assess. We decide whether it’s a data breach, and whether it’s reportable under the Notifiable Data Breaches scheme. We’ll take legal advice before we decide.
4. Tell the client. Within 24 hours of confirming a breach, we tell each affected client what happened, what data was involved, and what we’re doing.
5. Tell the regulator. When the scheme requires it, we notify the Office of the Australian Information Commissioner, and the people affected.
6. Fix the cause. We fix the cause before we say the matter is closed, and a second person checks the fix.
7. Publish a short note. We publish what happened, the date, what was affected, and what changed. We don’t name a client without their written consent.

Before this process is in place, we’ll name an incident lead and a deputy, and publish a contact inbox and a business phone number for reporting. Until then, report a concern to hello@cambercasper.com.au.