ASD ISM 0133 Responding to data spills by restricting access

Data Owners should be promptly notified: As soon as a data spill is detected, the person who manages the affected information should be informed immediately.

This can be done through a quick phone call or an email marked as urgent.

IT Team should restrict access: The IT staff need to limit who can access the spilled data to prevent further exposure.

They can do this by removing access privileges to the affected files or folders in the system as soon as possible.

Managers need to inform affected parties: The manager must notify any parties whose data might have been compromised.

This should be done transparently and swiftly, explaining what data was affected and what steps are being taken to address the situation.

HR should provide guidance: The HR department should offer support and guidance to the employee involved in the spill, ensuring they understand what went wrong and how to avoid similar incidents in the future.

Procurement should review third-party agreements: If the data spill involves information shared with outside partners, the procurement team should check existing agreements to ensure there's a clear protocol for handling such incidents, including any notification requirements.