Incident Management Overview

Introduction to Incident Management

In recent years, data breaches have become front page news as well as one of the leading causes for enforcement actions and fines by regulators across the globe. Adding to the complexity, breach notification laws are unique in their incident reporting requirements and timelines. Now more than ever, organizations need robust incident management programs and technology to both comply with regulations and ensure they are trusted in the eyes of customers, employees, and other stakeholders.

OneTrust Privacy Incident Management centrally manages incidents, automates tasks, and keeps records for compliance and notification, helping comply with global laws. Bridge the gap between privacy and security by automating incident notification and storing the audit trails needed for compliance.  OneTrust also mitigates future risk and improves workflows by initiating a root-cause analysis to identify outstanding system and application-level threats and find opportunities to refine the notification process.

Privacy Incident Management is part of the Privacy & Data Governance cloud with OneTrust. To learn more, see the Incident Management knowledge base.

Module Benefits:

  • Centrally manage incidents, with all the key metrics and context needed to understand the impact of an incident

  • Automate notification tasks and workflows

  • Mitigate risks and increase compliance readiness

Problems Solved by Incident Management:

Improve Incident Visibility

: Enable business administrators to report incidents and capture key incident metrics up-front or track breach response progress and notification deadlines with easy-to-use centralized dashboards

Streamline Investigation

: Simplify incident response with rule-based automated workflows based on law, location, or severity. Gather all the context needed to understand the impact of an incident with a centralized record of the activity history, subtasks, and supporting documentation.

Simplify Privacy Incident Response and Breach Notifications

: Save time with built-in templates for applicable global notification reports, with assigned owners, deadlines and automated reminders for the notification process

Typical Users

Admins or key users of Privacy Incident Management would report to or have the following titles:

  • Data Protection Officer

  • Chief Information Officer

  • Chief Risk Officer

  • Chief Compliance Officer

  • Chief Ethics & Compliance Officer

  • Chief Legal Officer

  • Chief Privacy Officer

  • Chief Data Officer

Relationship in OneTrust Platform

Incident Management can integrate with other OneTrust modules to enable enhanced features:

Third-Party Risk Management (TPRM)

: Can link the incidents reported in the platform to existing Vendors.

Data Mapping

: Can link the incidents to the Processing Activity, Asset, Entity and Vendor inventory.