Information governance incident management
Recording, investigating, and learning from data breaches and near misses, and deciding when to tell regulators and the people affected.
Levels
- 1. Awareness
You can:
- recognise a data breach or near miss and report it straight away
- 2. Working
You can:
- log incidents and gather the facts
- assess incidents against the organisation's severity criteria
- track actions to close
- 3. Practitioner
You can:
- investigate serious incidents and find their root causes
- decide, with senior colleagues, whether to notify regulators and people affected
- share lessons and track improvements
- 4. Expert
You can:
- set the incident management process for information governance
- lead the response to major breaches, including with regulators and the media
- report incident trends and risks to the board
Closest ESCO skills
Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.
Role levels that expect this skill
| Role level | Role | Band | Expected level |
|---|---|---|---|
| Deputy data protection officer | Data protection officer | 8a | Practitioner |
| Data protection officer | Data protection officer | 8b | Expert |
| Senior records officer | Health records officer | 4 | Working |
| Information governance officer | Information governance officer | 4 | Working |
| Senior information governance officer | Information governance officer | 5 | Working |
| Information governance lead | Information governance officer | 6 | Practitioner |
| Information governance manager | Information governance officer | 7 | Practitioner |