Top 10 Benefits of Reporting Incidents

1. Informs constituents and empowers them to make decisions regarding loss of their personal information

2. Initiate corrective actions (lowers repeat rate)3. If the big one hits, reporters will uncover if not reported in

a timely manner4. Gets you into the strategic planning loop5. Your Information Security Program gets on the executive

radar 6. Privacy and security will likely become a part of your

organization’s governance structure 7. You get to exercise and refine your incident response plan8. You get to write your incident response plan9. Your security awareness plan gets visibility10.You’re suppose to report according to State Policy

Growing Pains Keeps you busy—too busy Keeps others busy—too busy Executive spotlight (heat lamp) May be interpreted as too many incidents

and overkill reporting Stretches your strategic planning skills Exercises your communication and soft

skills Forces incident definition and procedures Team formation—different teams for

different incident types

Contact Information

Paulette JohnsonDepartment of Motor VehiclesChief Information Security Officer/Privacy Officer916-657-5830pjohnson@dmv.ca.gov