Draft — legal review required
Incident / Breach Response Policy
Draft Incident / Breach Response Policy following Detect → Contain → Investigate → Assess → Remediate → Document → Notify → Improve.
Platform administrators record incidents in security_incidents. Centres escalate suspected breaches according to NDPA/NDPC timelines after legal review.