Breach & Incident Response

Detect, triage and report incidents on a statutory clock, with tamper-evident evidence that holds up after the fact.

What it does

India gives you two clocks, not one. CERT-In directions require reporting certain cyber incidents within six hours of becoming aware. The DPDP Act separately requires notifying the Data Protection Board and every affected Data Principal of a personal data breach — with no materiality threshold to hide behind.

Six hours is not enough time to work out who to tell and what to say. This module pre-builds both: structured runbooks per incident type, and a report generator that assembles the CERT-In submission from the incident record rather than from a blank page at 2am.

Everything is hash-chained as it happens. The evidence export shows what was known at each point in the timeline, which is the difference between demonstrating a competent response and asserting one.

Capabilities

CERT-In six-hour report generator

Assembles the required submission from the incident record, so the deadline is a review step rather than a drafting exercise.

Structured breach runbooks

Per-incident-type playbooks with owners, steps and timers, so the first hour is execution rather than improvisation.

Scope assessment from the live inventory

Answers 'whose data was in that system' using Discovery's inventory, instead of a best guess.

Data Principal notification

Generates and tracks the individual notifications the DPDP Act requires, with delivery evidence.

Hash-chained evidence export

A tamper-evident timeline of what was known and done at each step, exportable for the Board or your insurer.

Which duties this discharges

The obligations under the DPDP Act 2023 that this module is built to satisfy. The Act takes full effect on 13 May 2027.

s.8(6)Notify the Board and each affected Data Principal of a breach
CERT-InReport specified cyber incidents within six hours of awareness
s.8(5)Apply reasonable security safeguards to prevent breach

Section references are to the Digital Personal Data Protection Act, 2023 and are provided for orientation, not as legal advice.

Works with

Governance, Records & Audit

The obligations that prove you are compliant — records, assessments, retention and audit integrity — kept current instead of rebuilt before each audit.

Data Discovery & Classification

Find every piece of personal data you hold — across databases, cloud storage, SaaS apps and APIs — before you try to govern it.

See Breach & Incident Response on your own data

A 30-minute walkthrough against the systems you actually run — not a generic demo environment.

Book a Demo All modules