Incident Management Terminology Guide

The following terminology is used throughout OneTrust's Incident Management module and documentation.

Term

Description

Breach Laws

The data breach or security breach notification laws that require organizations and government agencies to notify consumers or citizens if their personal information is breached. These laws also require the affected parties to take specific steps to remedy the situation.

Breach Notifications

The notifications required when there is a breach in a consumers or citizens personal information.

Databreachpedia

A global database of data breach regulations integrated into the Incident Management module. It helps organizations comply with region-specific breach notification laws by providing information such as: Notification requirements, timelines, contract details, overviews of relevant data protection laws, and external links to applicable legislation.

Date Discovered

The date and time the incident was discovered.

Date Occurred

The date and time the incident occurred.

Date Reported

The date and time the incident was reported.

Dynamic Incident Notification Assessment (DINA)

The engine that enables the privacy incident response and breach notifications (via built-in templates for applicable global notification reports, with assigned owners, deadlines and automated reminders for the notification process).

Guidance

A variety of resources and information that provide guidance on how to handle incidents.

Incident Register

The OneTrust repository for documenting individual incident details, stage progression, assessments, subtasks, jurisdictions, attachments, guidance, and activities to foster accountability and prioritize decision-making.

Incident Type

The category of the incident. There are various incident type options available in the system that helps users to categorize the incident record.

Incident Web Forms

Defines what data collection of specific incidents, incident types, and collection parameters in scope for requests. Web forms can also be integrated with the organization's internal portal to collect and automate requests.

Incident

An incident is an event that occurred that was the direct result of an issue identified with a lack of controls in place to prevent the incident from occurring.

Jurisdictions

The various territories of breach laws and regulations.

Reporter

The individual who reported the incident.

Root Cause

The root cause of an incident.