All tabletop exercises
Crisis·Starter·Executive audience
A law firm announces it is 'investigating' your breach
The prompt — read this to the room
Four days after you notified 210,000 customers that their names, addresses and loyalty account details were exposed, a plaintiffs' law firm publishes a press release saying it is investigating claims against your retail chain and inviting affected customers to get in touch. A demand letter citing a state privacy statute arrives the next day. Customer support is fielding calls asking whether people should join. Your forensic firm is still finishing its report. What gets written down now may be read in court later.
Total duration
1 h 15 min
People to involve
6
Best fit
Retail
Who to involve
Most important first.
- Legal counsel
- CEO / Managing director
- Communications / PR
- Customer support
- CISO / Head of security
- CFO / Finance
What it tests
- Put a litigation hold and privilege structure in place without stalling the response
- Align support scripts and public statements so they are accurate and do not create new liability
- Decide how to respond to the demand letter and any statutory cure period
- Identify which remediation offers help customers and which could be read as admissions
Outline of activities
- 1The press release and the demand letter
- 2Preserving evidence and protecting privileged work
- 3What support and comms say from today
- 4Responding to the demand and planning for a filed claim
- 5Debrief: making the next breach response litigation-ready
Run sheet (Pro)
The facilitator's timeline of execution, the detailed steps for running the session and the questions to ask each person.
Loading…