Reduce exposure and train employees
Maintain an IT-asset inventory, monitor unauthorised access, update systems promptly and keep secure backups. Train employees to recognise suspicious emails and report them. Use strong authentication and appropriate account controls, and avoid disclosing sensitive work information on public platforms.
Four response stages
Investigate how the breach happened and assess business and customer impact. Contain access, review privileged credentials and logs, then recover safely. Coordinate accurate communications and any legally required notifications. After recovery, review root causes and improve systems and processes. The 2019 bulletin’s controls are historical guidance; notification duties must be checked against current law.