Lesson 3.59: The remediation programme after a major breach
Months after a breach, attention moves on, but the promises made during it remain: to the regulator, to customers, to the board. Regulators check them, and a second incident with an open commitment is far worse than the first. A remediation programme tracks every commitment to closure with evidence, warns early about slips and tells the people it was promised to before they find out. In the lab you review Northwind's commitments, find one reported 'done' without proof, an overdue one and one about to slip, and write the status report.
18 min
You will learn to
- Track commitments by audience, due date and evidence
- Refuse 'done' without evidence
- Find overdue and soon-due items
- Report closure per audience
- Tell stakeholders about slips before they ask
Key terms
- Commitment
- A specific promise made to a regulator, customers or the board, with a due date.
- Closure evidence
- A document or export that proves a commitment was delivered.
- Slip
- A commitment that will miss or has missed its date.
- Proactive disclosure
- Telling the recipient about a slip before they ask.
- Programme status
- Regular report of commitments by audience, closure and risk.
← Validating the metrics you report · All lessons · Spaces in paths and file names →