What is a breach notification procedure?
A breach notification procedure is the documented process for telling affected customers, regulators, and sometimes individuals about a data breach. It covers who decides, who is contacted, through which channel, and what the notice contains. Legal deadlines vary by law and region.
What the buyer is really asking
Beyond the deadline, how does notification actually happen? Say who decides, who gets contacted, through which channel, and what the notice will include. Check that it matches what your contracts promise.
Other ways buyers ask it
Every one of these wants the same answer:
- “Describe your breach notification procedure.”
- “Who will you contact in the event of a breach?”
- “What information will a breach notice include?”
Evidence to have ready
- The notification section of your incident response plan
- A notification template, if one exists
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.