Incident Management Terminology Guide
The following terminology is used throughout OneTrust's Incident Management module and documentation.
|
Term |
Description |
|---|---|
|
Breach Laws |
The data breach or security breach notification laws that require organizations and government agencies to notify consumers or citizens if their personal information is breached. These laws also require the affected parties to take specific steps to remedy the situation. |
|
Breach Notifications |
The notifications required when there is a breach in a consumers or citizens personal information. |
|
Databreachpedia |
A global database of data breach regulations integrated into the Incident Management module. It helps organizations comply with region-specific breach notification laws by providing information such as: Notification requirements, timelines, contract details, overviews of relevant data protection laws, and external links to applicable legislation. |
|
Date Discovered |
The date and time the incident was discovered. |
|
Date Occurred |
The date and time the incident occurred. |
|
Date Reported |
The date and time the incident was reported. |
|
Dynamic Incident Notification Assessment (DINA) |
The engine that enables the privacy incident response and breach notifications (via built-in templates for applicable global notification reports, with assigned owners, deadlines and automated reminders for the notification process). |
|
Guidance |
A variety of resources and information that provide guidance on how to handle incidents. |
|
Incident Register |
The OneTrust repository for documenting individual incident details, stage progression, assessments, subtasks, jurisdictions, attachments, guidance, and activities to foster accountability and prioritize decision-making. |
|
Incident Type |
The category of the incident. There are various incident type options available in the system that helps users to categorize the incident record. |
|
Incident Web Forms |
Defines what data collection of specific incidents, incident types, and collection parameters in scope for requests. Web forms can also be integrated with the organization's internal portal to collect and automate requests. |
|
Incident |
An incident is an event that occurred that was the direct result of an issue identified with a lack of controls in place to prevent the incident from occurring. |
|
Jurisdictions |
The various territories of breach laws and regulations. |
|
Reporter |
The individual who reported the incident. |
|
Root Cause |
The root cause of an incident. |