Reporting Information Security incidents In brazil: A step-by-step guide According to the Regulation of the Data protection Authority

​When it comes to information security, the popular saying reflects an unavoidable reality: it is not a question of “if” a security incident will happen, but “when” it will happen. 

From the simplest breaches – such as sending an email to the wrong recipient – to the most challenging ones – such as a ransomware attack with exfiltration of personal data – the fact is that organizations around the world undergo security incidents every day, regardless of the security measures they may have implemented.