Data Breach Response Policy
Process for detecting, containing, investigating and communicating incidents.
Report an incident
Report suspected unauthorised access, exposed results, lost credentials or suspicious messages promptly to kwamestonecode@gmail.com. Include the affected account and approximate time, but do not send passwords, full student records or payment-card details.
Response stages
The response team should triage the report, preserve evidence, contain access, rotate credentials or secrets where needed, determine affected systems and people, remediate the cause, document decisions and complete a post-incident review.
Notifications
STONECODE and the school must assess applicable notification duties, affected individuals, regulators, payment providers and other parties with qualified counsel. Notifications should be accurate, timely, accessible and avoid exposing additional personal information.