Wɔde Akontaabu Akatua anaa HIPAA Fael a Wɔde Kɔma Onipa a Ɔnteɛ wɔ Email mu wɔ akwanhyia mu: Recall and Breach Triage¶

Sɛ wobɔ Send wɔ email a akatua krataa a wɔanhyɛ no encrypted, adwumayɛfo Social Security Numbers, client merger financials, anaa Protected Health Information (PHI) wom so, na wohu wɔ sikɔne abien akyi sɛ Outlook anaa Gmail auto-completed "David Miller (External Vendor)" sen sɛ "David Miller (Internal CFO)", kanyan mmara kwan so, mmara kwan so, ne kɔmputa so ahobammɔ ho asɛm a egye ntɛmpɛ. Nea woyɛ wɔ simma 5 a edi kan no na ɛkyerɛ sɛ ebia wubetumi atwa fael no mu kwan wɔ mfiridwuma mu ansa na nea wogye no abue, na nea woyɛ wɔ nnnɔnhwerew 24 kosi 72 a edi kan no mu no kyerɛ sɛ ebia w’ahyehyɛde no hyia asɛm a esii ho kyerɛwtohɔ a wo ankasa wosiesie daa anaasɛ mmara kwan so asotwe a emu yɛ den wɔ GDPR Ahyɛde 33 (dɔnhwerew 72 a ɛyɛ ahyɛde sɛ ɔhwɛfo amanneɛbɔ), the U.S. 1999 mu. HIPAA Mmara a Wɔde Bɔ Nsɛm a Wɔabu So (45 CFR 164.400-414), anaa ɔman no mmara a ɛfa data a wobu so ho.

Sɛ saa email a wɔamfa kwan a ɛnteɛ yi fa sikasɛm mu akwankyerɛ a ɛyɛ nnam a wɔde fa telefon so, apoobɔ, anaa adwumakuw inbox a wɔayɛ no basaa ho a, frɛ wo mpɔtam hɔ mmarahyɛ bagua anaa kɔmputa so nsɛmmɔnedi ho amanneɛbɔ telefon (anaasɛ wo mpɔtam hɔ nɔma a egye ntɛmpɛ, 911 wɔ United States ne Canada, 112 wɔ Europa Aman Nkabom no nyinaa mu, 999 wɔ United Kingdom, sɛ honam fam ahobammɔ da asiane mu a; hwɛ nɔma ahorow a egye ntɛmpɛ). Ntɛm ara cross-reference yɛn nuanom akwankyerɛfo wɔ akwanhyia mu Zoom anaa Teams screen-share leaks ne recording retraction, . akwanhyia mu production database a ɛtɔ, git kokoam leaks, ne asɛm a esii triage, na ntɛmpɛ akyirikyiri adwuma ahobammɔ ne data kokoamsɛm bere a woreyɛ containment sequence a ɛwɔ ase ha no.

Yɛ eyi mprempren¶

1. Sɛ wɔde fael no kɔmaa sɛ Cloud Link (OneDrive, SharePoint, Google Drive, Dropbox, Box) a, TUMI TUMI TUMI A ƐWƆ LINK NO SO (0 to 30 seconds) ansa na woabɔ mmɔden sɛ wobɛkae email no. Sɛ mpo email no te abɔnten so agyefo inbox mu dedaw a email nkae ntumi nyɛ yiye a, sɛ wosakra mununkum fael no kyɛfa nhyehyɛe no kɔ "Nnipa pɔtee (Yi nea wogye no)" anaa "Wɔabara" no twa kwan a wobɛfa so akɔ mu 1 second enti sɛ wobɔ link no a, ɛbɛma woanya "Access Denied" screen.
2. Sɛ woda so ara wɔ "Undo Send" mfɛnsere a ɛyɛ sikɔne 5 kosi 30 no mu wɔ Gmail anaa Outlook wɔ Wɛb so a, klik Undo wɔ wo screen no ase ntɛm ara. Once the "Undo" toast frankaa no yera, Simple Mail Transfer Protocol (SMTP) server no asoma nkra no afi wo outbox no mu.
3. Sɛ wode Microsoft 365 / Exchange Online di dwuma na wode email no kɔmaa wo yɔnko dwumayɛni bi WƆ wo adwumakuw ahyehyɛde koro no ara mu (same Exchange tenant), a ɛkanyan Recall This Message ntɛm ara, na MMFA email a edi akyi a ɛka sɛ "Mesrɛ wo, mmue me email a atwam no" kan. Email a ɛto so abien a ɛyɛ nwonwa a asɛmti "URGENT: DO NOT OPEN PREVIOUS EMAIL" bɛmena no kanyan anigye na ɛma nea wogye no di kan klik email a edi kan no so. Wɔ nnɛyi Microsoft 365 Cloud Message Recall mu no, Exchange popa nkrasɛm a wɔankenkan no komm fi ne yɔnko dwumayɛni bi inbox mu sɛ mpo wohuu desktop notification banner no a, sɛ wɔanbue nkra no nipadua no a.
4. Te saa Outlook no ase Recall This Message ƐNNYƐ adwuma mma wɔn a wofi abɔnten (@gmail.com, . @yahoo.com, anaa adwumakuw foforo de @client.com domain). Sɛ email twa wo company no SMTP hye kɔ abɔnten mail server so pɛ a, wo Exchange server no nni kwan zero sɛ ɛbɛkɔ company foforo server mu na apopa raw binary attachment (.xlsx, . .pdf, . .csv). Sɛ wobɔ so Recall wɔ abɔnten email so no de email a ɛto so abien a ɛyɛ aniwu nkutoo kɔma abɔntenni no sɛ "[Ɔsomafo] pɛ sɛ ɔkae nkra no...", bɔ wɔn kɔkɔ sɛ wɔnhwɛ wo email a edi kan no.
5. Hwɛ sɛ ebia na spreadsheet a wɔde abata ho no kura tab a ahintaw, nkyerɛwde a ahintaw, anaa PivotTable caches (xl/pivotCache/pivotCacheRecords1.xml). Akatua ne M&A leaks pii si bere a analyst bi de "Executive Salaries & SSNs" columns no sie anaasɛ ɔpopa source tab bi, afei ɔde email mena .xlsx adwuma nwoma adwene nko ara na wotumi hu. An .xlsx fael yɛ ZIP archive a ɛkora source rows a wɔapopa so wɔ ne mu XML PivotTable cache mu kosi sɛ wɔbɛpopa.
6. Bɔ wo mu Data Protection Officer amanneɛ (DPO), Amanneɛbɔ Ho Ahobammɔ Sohwɛfo Panyin (CISO), Privacy Officer, anaa Legal/HR Compliance team wɔ nnɔnhwerew 1 kosi 2 a edi kan no mu. Mmɔ mmɔden da sɛ wode PII, akatua, anaa HIPAA leak besie anaasɛ wo ne obi a ofi abɔnten nni nkitaho wɔ kokoam a mmara nhwɛ so. Wɔ GDPR Ahyɛde 33 ase no, ** nnɔnhwerew 72 dɔn** a ɛyɛ katee a wɔde bɔ data ahobammɔ mpanyimfo no amanneɛ no fi ase bɔ bere a odwumayɛni biara behu sɛ wɔabu mmara so no, enti sɛ wode mfomso no sie nnansa a, ɛhyew adwumakuw no mmara kwan so amanneɛbɔ mfɛnsere no na ɛdan mfomso a ɛyɛ nokware ma ɛbɛyɛ mmara sodi a wotumi gyae.

Gyinaesi dua: Kokoam email a wɔde sie a wɔamfa kwan a ɛnteɛ so ne mmara kwan so triage¶

Di saa anammɔn anammɔn a wɔde siw ano dua yi akyi a egyina sɛnea wɔde fael no bata ho ne sɛ ebia nea ogyee no a ɛnteɛ no wɔ w’ahyehyɛde no mu anaa akyi.

flowchart TD
    A["Akontaabuo Akatua, Client PII, anaa HIPAA Fael a Wɔde Kɔma Obi a Ɔnyɛ Obi"] --> B{"So wɔkyekyɛɛ fael no denam Cloud Link (OneDrive / SharePoint / Google Drive / Box) so anaasɛ sɛ Raw Fael Attachment (.xlsx / .pdf / .csv)?"}
    B -->|"Mununkum Nkitahodi (OneDrive / SharePoint / Google Drive) ."| C["Ntɛm ara bue fael kyɛfa nhyehyɛe -> Popa link / Yi abɔnten so dwumayɛni -> Hwɛ Audit Log na hwɛ sɛ fael no hwɛɛ/wɔtwee anaa"]
    C --> D{"So Audit Log kyerɛɛ 0 views/downloads ansa na worekum link no?"}
    D -->|"YIW: 0 Hwɛ / 0 Downloads"| E["BREACH AVERTED: Screenshot audit log a ɛkyerɛ sɛ zero access ansa na link revocation -> Log near-miss ne Security/DPO"]
    D -->|"DABI: Nea ogye no abue fael dedaw anaasɛ watwe"| F["Kɔ so kɔ Formal Containment & Mmara/DPO Escalation so"]
    B -->|"Raw File Attachment (.xlsx / .pdf / .docx) anaa Nipadua Nkyerɛwee a Ɛyɛ Nkate"| G{"So nea ogye no bɔne no yɛ INTERNAL (Adwumakuw Koro / Exchange Tenant) anaasɛ EXTERNAL (Adwumakuw Foforo / Ankorankoro Email)?"}
    G -->|"Mfinimfini Adwumayɛfo (M365 / Google Adwumayɛbea Org koro no ara) ."| H["1. Yɛ Outlook Cloud Message Recall (Popa mfonini ahorow a wɔankenkan) NA/ANAA frɛ IT Admin ntɛm ara na fa Exchange Admin Center Content Search Purge / Google Workspace Investigation Tool Delete yɛ adwuma"]
    G -->|"ABƆDEƐ A Ɔgye (Adetɔfoɔ, Ɔtɔnfoɔ, anaa Ɔhɔhoɔ) ."| I["MMƆ Outlook Recall (Ɛdi nkogu wɔ abɔnten & ɛbɔ nea ogye no kɔkɔ) -> Sɛ fael no wɔ Azure RMS / Purview Sensitivity Encryption a, twa hokwan ahorow no mu ntɛm ara"]
    H --> F
    I --> F
    F --> J["Bɔ amanneɛ wɔ Dɔnhwerew 1 mu kɔma DPO / Privacy Officer / CISO / HR a Message-ID, Timestamp, Recipient, ne Data Fields a wɔada no adi pɛpɛɛpɛ"]
    J --> K["Sɛ Mmara/DPO pene so a: Frɛ nea wogye no wɔ telefon so + fa Abisade a ɛfa Daa Popa & Ɔsɛe ho adansedi krataa a wɔde wɔn nsa ahyɛ ase wɔ ɔkwan a ɛfata so mena"]

Ɔfa 1: Mfiridwuma mu twetwe a edi kan-sekan 60 (Nea ɛyɛ adwuma ankasa vs. nea entumi nyɛ yiye) .¶

Sɛ wuhu sɛ kokoam email bi kɔɔ address a ɛnteɛ so kɛkɛ a, sekan biara bu efisɛ 50 percent of corporate emails no bue wɔ simma 3 a edi kan bere a wɔadu hɔ no mu. Yɛ mfiridwuma mu retraction adwinnade pɔtee a ɛne wo email platform ne attachment type hyia:

1. Nsɛm a ɛfa ho A: Na fael no yɛ SharePoint, OneDrive, Google Drive, anaa Dropbox link (100% Killable) .¶

Sɛ w’ahyehyɛde no de fael ahorow bata ho sɛ cloud links (anaasɛ sɛ wode link bi ahyɛ mu) a, wokura remote kill-switch bere a wɔde email no akɔ na wɔabue mpo akyi: - Microsoft OneDrive / SharePoint wɔ Intanɛt so: 1. Bue OneDrive anaa SharePoint, klik fael no so nifa, na paw Manage Access. 2. Wɔ Links ase no, klik Trash Can (Delete Link) ahyɛnsode a ɛwɔ kyɛfa link no nkyɛn no so, na wɔ Direct Access ase no, klik nea wogye no no din na sesa tumi krataa no kɔ Yi tẽẽ kwan. 3. Klik Ellipsis ( ) no so....) -> Nsɛm a ɛkɔ akyiri -> Dwumadie (anaasɛ ma wo Microsoft 365 Admin nhwɛ Microsoft Purview Audit Log sɛ FileAccessed / . FileDownloaded events) de kyerɛ wɔ mmara kwan so sɛ ebia nea wogyee no no klik link no so pɛn ansa na woakum no. - Google Drive / Google Docs / Google Nkrataa: 1. Klik fael no so nifa wɔ Google Drive -> Share. 2. Sesa General access fi "Obiara a ɔwɔ link" kɔ Restricted, na yi nea ogye no email address a ɛnteɛ no fi Nnipa a ɔwɔ access. 3. Sɛ mprempren nea wogye no no wɔ Google Sheet a wɔabue wɔ wɔn screen so mprempren ara a, klik Settings (Gear Icon) wɔ Share modal no mu na yi "Wɔn a wɔhwɛ ne wɔn a wɔka nsɛm no betumi ahu ɔkwan a wɔfa so twe, tintim, na wɔyɛ kɔpi" ansa na woapam wɔn afi hɔ. 4. Hwɛ Hwɛ -> Dwumadie dashboard -> Ahwɛfoɔ nyinaa wɔ Google Doc/Sheet no mu na wobɛhunu simma biara berɛ nsɔano pɔtee a ɛkyerɛ deɛ ɔhwɛɛ krataa no.

2. Nsɛm a ɛfa ho B: Microsoft Outlook / Exchange Online Recall This Message (Mfinimfini vs. Abɔnten Matrix)¶

Adwumayɛfo pii sɛe simma a ɛsom bo de klik Outlook Kae Nkrasɛm Yi bɔtn no so a wonnim bere a Exchange betumi atwe email akɔ akyi ankasa:

Sɛnea wobɛkanyan Outlook Message Recall yiye (Ma Mfomso a Ɛfa Mfomso a Ɛfa Ɔdansefo koro no Mu Nkutoo Ho) .¶

1. Wɔ Outlook (Desktop, New Outlook, anaa Outlook wɔ Wɛb so) mu no, klik wo Sent Items folda a ɛwɔ benkum so.
2. Klik mprenu email a wɔakyerɛ no kwan a ɛnteɛ no so ma ɛbɛbue wɔ n’ankasa pop-up window a ɛyɛ soronko mu (Recall ahintaw wɔ Classic Outlook akenkan pane no mu).
3. Wɔ soro ribbon no so no, kɔ Nkrasɛm -> Nneyɛe -> Kae Nkrasɛm Yi (anaasɛ wɔ New Outlook / Wɛb mu no, klik Kae nkra ahyɛnsode a ɛwɔ nkra a wɔde amena no atifi).
4. Paw "Popa nkra yi mfonini a wɔankenkan" na hwɛ "Ka kyerɛ me sɛ nkae no di nkonim anaasɛ entumi nyɛ yiye ma obiara a ogye no", afei klik OK.

--- .

Ɔfa 2: Forensic damage assessment (Dɛn na na ɛwɔ saa fael no mu ankasa?)¶

Ansa na wobɛbɔ wo Data Protection Officer (DPO), Mmara dwumadibea, anaa ɔpanyin, gye simma 3 na bue fael pɔtee a wode amena fii wo Sent Items folda no mu na wohwɛ emu nsɛm no mu.

1. "Hidden Data Traps" 4 a ɛwɔ Excel mu (.xlsx) ne PDF fael ahorow¶

Sɛ wode Excel adwuma nhoma anaa PDF bi mena email a wususuw sɛ woadi kan ayi nkyerɛwde a ɛyɛ mmerɛw no afi hɔ a, hwɛ saa layers anan a ahintaw yi ntɛm ara: - Afiri 1: Rows a Ahintaw, Columns a Ahintaw, ne Hidden / "VeryHidden" Worksheets: Obiara a obenya .xlsx fael no betumi akliki Unhide Columns / Yi Worksheets (anaasɛ bue VBA Editor no Alt + F11 sɛ wɔbɛsesa xlSheetVeryHidden to xlSheetVisible) wɔ sikani 5 mu. - Afiri 2: Excel PivotTable Cache Afiri (pivotCacheRecords1.xml): - Fa no sɛ woakyekyere PivotTable a wɔaboaboa ano afi HR master table a ɛwɔ 10,000-row a Adwumayɛfo Din, Fie Address, Akatua, ne SSNs wom mu, afei popaa HR master worksheet tab a ɛwɔ row 10,000 no, siee .xlsx fael a ɛwɔ nsɛm a wɔaboaboa ano PivotTable tab nkutoo, na ɛde kɔmaa adetɔnfo bi wɔ email so. - Sɛnea wɔahyɛ no, Excel sie fibea row 10,000 a wɔapopa no nyinaa mfonini a edi mũ wɔ adwuma nhoma no mu PivotCache memory no mu (Save source data with file). Obiara a ɔbɔ nɔma cell baako biara a ɛwɔ wo PivotTable mu no mprenu no kanyan Excel Show Details (Drill-Down) feature no, a ɛsan yɛ HR master table a wɔapopa no nyinaa a adwumayɛfoɔ biara akatua ne SSN wɔ krataa foforɔ so. - Afiri 3: Document Version Abakɔsɛm & Nsakrae a Wɔadi akyi (.docx / Cloud Docs): Sɛ wogyaw Track Changes a wɔanklik Gye Nsakraeɛ Nyinaa, anaasɛ wo kyɛ cloud document a Editor access (a ɛma kwan ma wohwɛ Version History a edi mũ) a, nea ɔgye no bɛtumi akenkan nsakraeɛ biara a wɔapopa. - Afiri 4: "Black Highlighter" PDF Redactions a ɛnsɛ: Sɛ wotwe ahinanan tuntum nsusuwii anaa tuntum highlighter wɔ SSN anaa sikakorabea akontaabu nɔma so wɔ Word/Preview mu na wode sie sɛ PDF a, ɛnyɛ sɛ wobɛpopa nsɛm a ɛwɔ ase no; nea ogye no betumi asi adaka tuntum no so dua, mia so Ctrl + C, na fa cleartext SSN no hyɛ Notepad mu.

2. Nkyekyɛmu a ɛfa mmara mu denden a ɛwɔ data a ɛda adi no mu¶

--- .

Ɔfa 3: Sɛnea wobɛbɔ amanneɛ wɔ wo mu na wo ne nea ogye no bɔne adi nkitaho (Asɛmfua-asɛmfua nsusuwso) .¶

Sɛ wobɔ mmɔden sɛ wobɛtwa mfiridwuma mu kwan no mu na woahu data a na ɛwɔ fael no mu wie a, di anammɔn mmienu escalation protocol yi akyi:

Anamɔn 1: Ntɛm ara mu escalation kɔ wo DPO / Privacy Officer / CISO / Manager (Wɔ simma 15 kosi 60 mu) .¶

Wo ne wo adwumakuw no nni nkitaho Ahobammɔ Asɛm a Ɛfa Ho Mmuae (security@ / . privacy@ / . dpo@) channel ne wo direct manager ntɛm ara ne saa nokwasɛm anum pɛpɛɛpɛ yi: 1. Bere Nsɔano & Bere a Wɔde Di Dwuma Pɛpɛɛpɛ: "Wɔde kɔe nnɛ wɔ 14:12 UTC." 2. Email Address a Ɔsomaa no Pɛpɛɛ & Ɔgyefo a Ɔnyɛ Ɔdefo (ne wɔn a wɔyɛ): "Wɔde kɔmaa." dmiller@vendor-corp.com (a bound vendor a ɛwɔ hɔ dedaw wɔ NDA ase) mmom sen sɛ dmiller@ourcompany.com." (Wɔ HIPAA ne GDPR 4-factor risk assessments ase no, email a wode bɛmena adwumakuw foforo a HIPAA akata so, sikakorabea, anaa adetɔnfo a wɔakyekyere no wɔ NDA ase wɔ akwanhyia mu no kura asiane nkontaa a ɛba fam koraa sen email a wode bɛmena obi a wonnim @gmail.com address.) 3. Attachment Type & Encryption Status: "Wɔde abata ho sɛ raw." .xlsx fael, asɛmfua biara nni hɔ" ANAA "Wɔakyɛ sɛ SharePoint link; wɔtwaa mu wɔ 14:14 UTC a 0 hwɛɛ wɔ audit log mu." 4. Exact Data Elements & Row Count Inside: "Na fael no kura row 42 a ɛyɛ Q3 bonus sika ne Adwumayɛfoɔ ID; ZERO Social Security Numbers, ZERO bank numbers, ne ZERO home address." 5. Nneyɛe a Wɔayɛ De Besi Hɔ: "Wɔatwa SharePoint link no mu; wɔretwɛn wo nsaano nkyerɛwee wɔ Certificate of Destruction abisade no so."

Anamɔn 2: Frɛ nea wogye no na woanya "Certificate of Destruction / Attestation of Deletion" a wɔde wɔn nsa ahyɛ ase.¶

Wɔ U.S. HHS Dwumadibea a Ɛhwɛ Ɔmanfo Hokwan So (OCR) HIPAA Nneɛma 4 Asiane Nhwehwɛmu ( .45 CFR 164.402) ne Europa Nsɛm Ho Banbɔ Bagua (EDPB) Akwankyerɛ 9/2022, sɛ obi a wɔanhyɛ da sɛ obegye no (titiriw adwumakuw no ho nimdefo, mmaranimfo, akontaabufo, anaa akwahosan ho adwumakuw bi a wogye no di) kyerɛw si so dua ntɛm ara sɛ wɔantwe/wɔankɔfa fael no na wɔaprapra email no afi wɔn Inbox ne Deleted Items / Trash mu daa a, mmarahyɛfo taa ma ahyehyɛde no kwan ma wɔmfa asɛm no nto ** nea wɔagyae mu low-probability a ɛda adi**.

Sɛ wo Mmara/Kokoam Nsɛm Ho Ɔpanyin no pene so a, di kan frɛ nea woanhyɛ da sɛ wo nsa bɛka no wɔ telefon so, na di akyi ntɛm ara de saa Inadvertent Disclosure & Deletion Attestation Email yi di akyi ntɛm ara (yi mfitiase attachment no ansa na wode amena):

Subject: URGENT: Inadvertent Confidential Email Notice & Request for Deletion (Sent [Date] at [Time])

Dear [Recipient Name],

Earlier today at [Time], an email with the subject line "[Exact Subject Line of Misdirected Email]" was inadvertently sent to your email address due to an address auto-complete error.

That message and its attachment contain confidential and legally protected information intended solely for an internal recipient. If you have not yet opened the message or attachment, we kindly ask that you do NOT open, download, copy, or forward it.

To help us satisfy our regulatory compliance and audit obligations, please complete these two quick steps right now:

1. Permanently delete the original email (and any downloaded copy of the attachment) from your Inbox, Downloads folder, and your "Deleted Items / Trash" folder (in Outlook on Windows, you can select the email and press Shift + Delete).
2. Reply directly to this email with the following one-sentence confirmation for our compliance log:

   "I confirm that I have permanently deleted the email sent on [Date] with the subject '[Original Subject]' and any attachments from my inbox, local storage, and trash/deleted items without retaining, copying, or forwarding any copy of the contents."

Thank you sincerely for your integrity and immediate assistance in resolving this error.

Best regards,
[Your Name / Title / Privacy Officer Contact]

--- .

Ɔfa 4: Permanent technical guardrails sɛnea ɛbɛyɛ a woremfa email nkɔ onipa a ɔnyɛ papa anaa data a ahintaw bio da¶

Sɛ wowie ntɛm ara triage no wie a, fa simma 10 dane saa ahobammɔ anum a wɔde ahyɛ mu yi wɔ Microsoft Outlook, Gmail, ne Excel mu sɛnea ɛbɛyɛ a mfomso a ɛyɛ auto-complete anaa PivotTable cache a wɔde asie no rentumi mma mmara sobu foforo mma da:

• 1.1. Popa Poisoned Auto-Complete Nsɛm a Wɔakyerɛw (Nickname Cache) Ntɛm ara:
  • Wɔ Outlook anaa Gmail mu no, fi ase kyerɛw obi a ofi abɔnten no din wɔ... To: adaka no mu kosi sɛ nyansahyɛ a ɛwɔ ase hɔ no bɛba, afei klik ** .X (Delete)** icon a ɛwɔ wɔn din nifa so wɔ dropdown list no mu enti auto-complete nhyɛ nyansa da sɛ wɔnyɛ wɔ akwanhyia mu bio.
• 2.1. Dane On Maximum "Undo Send / Twentwɛn Delivery" (30 Seconds wɔ Gmail mu, . 2 Minutes wɔ Outlook mu):
  • Gmail: Kɔ Nsiesiei (Gear) -> Hwɛ nhyehyɛe nyinaa -> General -> Undo Send na sesa bere a wɔde twa mu no fi 5 seconds kosi nea ɛsen biara so ** .30 seconds** na ɛyɛ.
  • Outlook Desktop (Classic): Kɔ Mmara -> Hwɛ Mmara & Kɔkɔbɔ so -> Mmara Foforo -> Fa mmara di dwuma wɔ nkrasɛm a mede mena no ho -> Defer delivery by 2 simma (gye sɛ asɛmti no kura a "#now"). Simma 2 Outbox buffer bi kyere 95 percent of attachment ne recipient mfomso ansa na email no afi wo kɔmputa no so da.
• 3.1. Ma Abɔnten so Ogyefo Kɔkɔbɔ Banners (MailTips wɔ Exchange / Abɔnten Label wɔ Gmail mu):
  • Nnɛyi Microsoft 365 ne Google Workspace si abɔnten email chips so dua wɔ yellow/orange mu na ɛkyerɛ banner a ɛkenkan "Nea odi so yi wɔ w'ahyehyɛde no akyi" ansa na woabɔ Send. Mmu w’ani ngu yellow/orange recipient chip so da bere a wode emu spreadsheets rebata ho no.
• 4.1. Fa Excel no Built-In no yɛ adwuma Document Inspector (File -> Info -> Check for Issues -> Inspect Document) Ansa na Abɔnten Email Biara:
  • Ansa na wode biara bɛbata ho .xlsx anaasɛ .docx fael no kɔ email so, tu mmirika Hwɛ Nwoma. Ɛyɛ ne ho frankaa Rows ne Columns a Ahintaw, Adwuma Krataa a Ahintaw, Nsɛm a Wonhu, Document Properties/Authors, ne Cached PivotTable Data, na ɛma wo Yi Ne Nyinaa bɔtn a wobɛbɔ pɛnkoro.
  • Sɛ woresoma nsɛm a wɔaboaboa ano pon akɔ abɔnten a, kɔpi nkwammoaa no na fa di dwuma Paste Special -> Values (V) kɔ adwuma nhoma foforo a ɛnyɛ hwee mu (anaasɛ fa krataa a ɛyɛ adwuma no nkutoo kɔ .pdf) enti zero fomula, tab a ahintaw, anaa PivotCaches ne fael no tu kwan.
• 5.1. Password-Protect Sensitive Files Out-of-Band (anaasɛ Fa Nkate Nkyerɛwde Di Dwuma):
  • Bere biara a ɛsɛ sɛ wode akatua, tow nkrataa, anaa PII mena sɛ attachment no, fa AES-256 password a emu yɛ den encrypt Excel/PDF fael no (File -> Info -> Protect Workbook -> Encrypt with Password) na fa password no kɔma nea wogye no wɔ ɔkwan a ɛyɛ soronko koraa (te sɛ SMS text message, Signal, Slack, anaa telefon so frɛ, da wɔ email thread koro no ara mu). Sɛ mpo wode email a wɔde encrypt no ahyɛ mu no a .xlsx fael no kɔma David Miller a ɛnteɛ, a SMS password a ɛkɔ David Miller fon nifa so no nni mu no, fael no yɛ cryptographic birikisi a wontumi nkenkan (0% data a wɔabu so a wobetumi abɔ ho amanneɛ wɔ HIPAA ne GDPR safe-harbor encryption exceptions ase).

--- .

Mpɔtam hɔ ntɛmpɛ nɔma ne adwumakuw no nhyehyɛe ahorow¶

Bere a kokoam email a ɛba wɔ akwanhyia mu no yɛ mmara ne kɔmputa so ahobammɔ asɛm sen sɛ ɛbɛyɛ honam fam 911 ntɛmpɛ (gye sɛ honam fam ahunahuna anaa apoobɔ a ɛba ntɛm ara ka ho, wɔ saa tebea yi mu no frɛ 911 wɔ U.S./Canada, 999 wɔ UK, 112 wɔ EU, anaa 000 wɔ Australia), ɛsɛ sɛ ahyehyɛde ahorow di mmara kwan so data ahobammɔ yi so atumfoɔ ne dɔn a wɔhyɛ sɛ wɔde ma amanneɛbɔ:

United States ne Canada¶

• U.S. 1999 mu. HIPAA Akwahosan Ho Nsɛm a Wɔabu So (Protected Health Information): U.S. na ɛhwɛ so. Akwahosan ne Nnipa Nnwuma Dwumadibea Dwumadibea a Ɛhwɛ Ɔmanfo Hokwan So (HHS OCR) nam OCR Mmara sobu Portal so (ocrportal.hhs.gov). Mmara a wɔabu so a ɛka 500 or more ɛsɛ sɛ wɔbɔ ankorankoro amanneɛ kyerɛ HHS OCR a wɔntwentwɛn wɔn nan ase a ntease nnim na wɔ kalenda nnafua 60 akyi wɔ bere a wɔahu no; mmara so bu a ɛka fewer than 500 ɛsɛ sɛ wɔkyerɛw ankorankoro din na wɔbɔ wɔn amanneɛ wɔ nnafua 60 akyi wɔ kalenda afe no awiei.
• YƐN. Sikasɛm, Towtua & Ɔman PII Mmara so bu: Ɛsɛ sɛ towtua ho adwumayɛfo ne adwumawuranom a wɔrehyia W-2/akatua ho data korɔnbɔ amanneɛ kyerɛ IRS Stakeholder Liaison ne FBI IC3 (ic3.gov) na ɛyɛ. Ɛsɛ sɛ sikasɛm asoɛeɛ a ɛnyɛ sikakorabea a ɛwɔ FTC Ahobanbɔ Mmara ase bɔ FTC amanneɛ wɔ nnafua aduasa ntam sɛ wɔgye data a wɔanhyɛ da a ɛka no a wɔmma ho kwan 500+ adetɔfo. U.S. aman 50 no nyinaa hyɛ mmara kwan so mmara sobu ho amanneɛbɔ mfɛnsere (mpɛn pii no nnafua 30 kosi 45) so.
• Canada (PIPEDA & Provincial Privacy Laws): Bɔ mmara sobu a ɛde "asiane ankasa a ɛde ɔhaw kɛse ba (RROSH)" de kɔma Canada Kokoam Nsɛm Ho Dwumadibea (OPC, . priv.gc.ca) ntɛm ara sɛnea ɛbɛyɛ yiye, na wɔde kɔma ɔmantam no mu commissioners (CAI wɔ Quebec wɔ Mmara 25 ase, IPC wɔ Ontario ma PHIPA).

United Kingdom na ɛwɔ hɔ¶

• UK Amanneɛbɔ Soafo Dwumadibea (ICO): Wɔ UK GDPR Ahyɛdeɛ 33 ase no, ɛsɛ sɛ wɔn a wɔhwɛ so no bɔ ICO (ico.org.uk/for-organisations/report-a-breach/ anaasɛ 0303 123 1113) wɔ ** nnɔnhwerew 72** akyi a wahu, gye sɛ ɛnyɛ nea ɛda adi sɛ mmara so bu no de asiane bɛba ankorankoro hokwan ne ahofadi so.

Europa Aman Nkabom Kuw¶

• GDPR Ahyɛdeɛ 33 & Ahyɛdeɛ 34 (EU Aman 27 no nyinaa): Ahyɛdeɛ dɔnhwereɛ 72 amanneɛbɔ dɔn ma ɔman no Data Protection Supervisory Authority a ɛdi kan (CNIL wɔ France, BfDI wɔ Germany, AEPD wɔ Spain, DPC wɔ Ireland, Garante wɔ Italy, AP wɔ Ireland) a ɛdi EDPB Akwankyerɛ akyi 9/2022 na ɔkyerɛwee.

Australia ne New Zealand¶

• Australia (Notifiable Data Breaches / NDB Scheme): Australia Amanneɛbɔ Soafo Dwumadibea (OAIC, . oaic.gov.au) na ɛyɛ. Ahyehyɛde ahorow wɔ nnafua 30 de hwɛ sɛ ebia data a wɔabu so a ɛfata no betumi de ɔpira kɛse aba (ne sɛ ebia adeyɛ a wɔde besiesie, te sɛ nea wɔpopa ntɛm ansa na wɔde adi dwuma ɔkwammɔne so no, siw ɔhaw kɛse ano anaa).
• New Zealand (Privacy Act 2020): Bɔ Adwumayɛbea a ɛwɔ Privacy Commissioner (OPC, . privacy.org.nz) via NotifyUs wɔ ** nnɔnhwerew 72** akyi bere a woahu sɛ wɔabu kokoam nsɛm so bu a wobetumi abɔ amanneɛ.

India ne Asia-Pacific¶

• India ( .CERT-In & . DPDP Act): Bɔ nsɛm a wɔakyerɛ a ɛfa kɔmputa so ahobammɔ ne data a ɛretu ho amanneɛ kyerɛ CERT-In (incident@cert-in.org.in) wɔ ** nnɔnhwerew 6** mu na bɔ Data Protection Board of India amanneɛ wɔ DPDP Mmara no ase.
• Singapore (PDPA) & Japan ( .APPI): Wɔ Singapore no, bɔ PDPC amanneɛ wɔ kalenda nna 3 ( nnɔnhwerew 72) mu. Wɔ Japan no, fa amanneɛbɔ a edi kan kɔma Personal Information Protection Commission (PPC) wɔ nnafua 3 kosi 5 mu.

--- .

Nsɛm a wɔtaa bisa¶

So sɛ wobɔ "Recall This Message" wɔ Microsoft Outlook mu a, ɛpopa email a wɔde akɔ Gmail address anaa adwumakuw foforo email server so?¶

Dabi, dabi. Outlook "Kae Nkra yi" afã no gyina Microsoft Exchange mu mailbox ahyɛde ahorow a ɛyɛ wɔn dea a ɛyɛ adwuma bere a nea ɔde kɔma ne nea ogye no nyinaa te Microsoft 365 / Exchange ahyehyɛde koro no ara mu pɛpɛɛpɛ nkutoo so. Sɛ wode email kɔma obi a ɔwɔ abɔnten a `@gmail.com` address anaasɛ client bi de `@othercompany.com` address na klik Recall, abɔnten mail server no bu n'ani gu popa akwankyerɛ no so na ɛde amanneɛbɔ a ɛto so abien a wɔakyerɛw no pefee a ɛka sɛ "[Wo Din] pɛ sɛ ɔkae nkrasɛm '[Asɛmti]' no ma." Saa amanneɛbɔ a ɛtɔ so mmienu no si wo mfomsoɔ so dua na ɛma awerɛhyɛmu sɛ abɔnten so nipa no bɛbue email a ɛdi kan no ntɛm ara.

Sɛ mede password a emu yɛ den de encrypt Excel anaa PDF fael no ansa na mede email akɔma obi a ɔnyɛ yiye wɔ akwanhyia mu (na MMANFA password no anhyɛ email no mu), so ɛda so ara yɛ HIPAA anaa GDPR data a wɔabu so a wobetumi abɔ ho amanneɛ?¶

Dabi, U.S. HIPAA Mmara a Wɔde Bɔ Amanneɛbɔ a Wɔde Bɔ Nsɛm a Wɔabu So (`45 CFR 164.402`) ne EU/UK GDPR Ahyɛdeɛ 34 (EDPB Akwankyerɛ 9/2022) de **Encryption Safe Harbor** a ɛda adi pefee ma. Sɛ wɔde encryption a emu yɛ den a ɛyɛ nnwuma-gyinabea (te sɛ AES-128 anaa AES-256 denam nnɛyi Excel so) na ɛkyekyeree attachment a wɔde email menae wɔ akwanhyia mu no a `.xlsx` password ahobanbɔ, 7-Zip AES-256, anaa Microsoft Purview Sensitivity Labels) na wɔamfa password no ankɔma obi a ɔmfa no da, kokoam data no da so ara yɛ ciphertext a wontumi nkenkan. Fa wo security team no kyerɛw nea ɛkame ayɛ sɛ woayera no wɔ wo mu, nanso ɛnyɛ sɛ woabu ankorankoro data a enni ahobammɔ so a wobetumi abɔ ho amanneɛ.

So m’adwumakuw no IT dwumadibea no betumi apopa email bi a mede kɔmaa me yɔnko dwumayɛni bi a ɔwɔ yɛn adwumakuw no mu wɔ akwanhyia mu sɛ me yɔnko dwumayɛni no abue dedaw a?¶

Aane. Bere a w'ankasa Outlook "Kae Nkrasɛm Yi" bɔtn no bedi nkogu sɛ wo yɔnko dwumayɛni a ɔwɔ wo mu no akliki email no so dedaw na wahyɛ no agyirae sɛ Kenkan a, Microsoft 365 Exchange Administrator anaa Google Workspace Super Admin ama tumi a wɔde tew mmara so no akɔ soro. Wɔ Microsoft 365 mu no, admin betumi de Defender adi dwuma ama Office 365 Threat Explorer anaasɛ ɔde Exchange Online PowerShell ayɛ adwuma `New-ComplianceSearchAction -Purge -PurgeType HardDelete` ahyɛde sɛ fa ahoɔden yi email no mfi wo yɔnko dwumayɛni no mailbox mu bere a wɔakenkan mpo awie no. Wɔ Google Workspace mu no, admin bi betumi de Security Investigation Tool no apopa nkra no afi ne yɔnko dwumayɛni no inbox mu.

Dɛn nti na nea ogyee no huu yɛn adwumakuw no kokoam akatua nyinaa bere a mede akatua nkyerɛwde no siee na mepopaa raw data tab a ɛwɔ Excel mu ansa na meresoma no?¶

Excel fael ahorow (`.xlsx`) sie data so wɔ mmeae abien a wɔn a wɔde di dwuma dodow no ara nhwɛ da. Nea edi kan no, sɛ wobɔ kɔla anaa adwuma krataa tab bi so nifa na wopaw **Hide** a, ɛde sie wɔ aniwa so nkutoo; obiara a ɔgye adwuma nwoma no bɛtumi akliki **Unhide** wɔ sikani mmienu mu de ahwɛ cell biara a ahintaw. Nea ɛtɔ so mmienu, sɛ wo adwuma nwoma no kura **PivotTable** a, Excel sie fibea dataset a ɛwɔ aseɛ no nyinaa mfonini a ɛdi mũ wɔ XML cache a ɛwɔ mu (`pivotCacheRecords1.xml`) mpo bere a woapopa mfitiase fibea adwuma krataa tab no akyi. Sɛ nea ogye no no klik nɔma a wɔaboaboa ano biara a ɛwɔ wo PivotTable no mu mprenu a, Excel yɛ krataa foforo a ɛkyerɛ fibea row a wɔapopa a ɛmaa saa cell no aduan no nyinaa. Bere nyinaa kɔpi na **Paste Values (`Ctrl + Shift + V`)** kɔ adwuma nhoma foforo a ɛnyɛ hwee mu ansa na wode email akɔ abɔnten.

So wobeyi me afi adwumam sɛ mebɔ HR anaa IT amanneɛ ntɛm ara sɛ mede akatua anaa afɛfo PII spreadsheet kɔmaa onipa a ɔnteɛ no wɔ akwanhyia mu a?¶

Wɔ nnɛyi ahyehyɛde dodow no ara mu no, wobu mfomso a ɛbae wɔ akwanhyia mu a ɛfa auto-complete anaa attachment ho a obi ankasa bɛbɔ ho amanneɛ wɔ simma 15 kosi 60 a edi kan no mu no sɛ onipa mfomso a asodi biara nni ho. Nea ɛne eyi bɔ abira no, sɛ wobɔ mmɔden sɛ wode mfomso no besie, wobɛpopa email no afi wo Nneɛma a wode amena no mu a worenka nkyerɛ obiara, anaasɛ wobɛtwɛn kosi sɛ nea wogye no no bɛnwiinwii nna bi akyi no, ɛkame ayɛ sɛ bere nyinaa na ɛma wogyae adwuma no esiane biribi nti efisɛ sɛ wode nsu a ɛretu no sie a, ɛma adwumakuw no hwere ne mmara kwan so nnɔnhwerew 72 GDPR / HIPAA mitigation window.

--- .

Fibea ne aban akwankyerɛ¶

• Europa Nsɛm Ho Banbɔ Boayikuw (EDPB) & UK Amanneɛbɔ Soafo Dwumadibea (ICO): Akwankyerɛ 9/2022 a ɛfa Ankorankoro Data a Wɔbu So Ho Amanneɛbɔ ho wɔ GDPR ase (Ahyɛdeɛ 33 ne 34: Nnɔnhwerew 72 Dɔn, Encryption Safe Harbor, ne Nea Wogye Di a Wɔpopa Adansedie Asɛm Nhwɛsoɔ).
• YƐN. Akwahosan ne Nnipa Nnwuma Dwumadibea Dwumadibea a Ɛhwɛ Ɔmanfo Hokwan So (HHS OCR): HIPAA Mmara a Wɔde Bɔ Nsɛm a Wɔabu So (45 CFR §§ 164.400-414), Nneɛma Anan a Ɛfa Asiane a Wɔbu So Ho Nhwehwɛmu Akwankyerɛ, ne Akwankyerɛ a Wɔde Ma Akwahosan Ho Nsɛm a Wɔabɔ Ho Ban a Wɔnnyɛ Ahobammɔ a Wɔrentumi mfa nni dwuma, wontumi nkenkan, anaasɛ wontumi nkyerɛkyerɛ mu mma Ankorankoro a Wɔmma Wɔn Ho Kwan (NIST SP 800-111 Encryption Safe Harbor).
• Ɔman Asoɛe a Ɛhwɛ Gyinapɛn ne Mfiridwuma So (NIST, United States): NIST SP 800-61 Rev. 2 Kɔmputa Ahobanbɔ Asɛm a Ɛsisii Ho Akwankyerɛ ne NIST SP 800-122 Akwankyerɛ a Ɛfa Nsɛm a Wɔde Hu Nnipa Ho Ahintasɛm Ho Ban (PII).
• Microsoft Corporation: Nkrasɛm a egyina mununkum so a wɔkae wɔ Exchange Online Mfiridwuma Ho Nneɛma a Wɔde Yɛ Adwuma mu (techcommunity.microsoft.com) ne Microsoft Purview Data Loss Prevention (DLP), Nkateɛ Nkyerɛwde, ne Nwoma Nhwehwɛmufoɔ Nwoma.
• Amerika Mmaranimfo Fekuw (ABA) & U.S. Federal Mmara a Ɛfa Adanse Ho: ABA Formal Opinion 05-437 / 11-460 ne Federal Rule of Adanse 502(b) (Nkitahodi a Wɔde Hokwan a Wɔde Ma a Wɔda no Adi a Wɔanhyɛ Da ne Clawback Amanneɛbɔ a Wɔde Ma Ntɛmntɛm).

Akwankyerɛ ahorow a ɛfa ho¶

• Akwanhyia Zoom anaa Teams screen-share leak, hot-mic asɛm, ne recording retraction
• Akwanhyia mu production database drop, git kokoam leak, ne asɛm a esii triage
• Akyirikyiri adwuma ahobammɔ ne data kokoamsɛm a egye ntɛmpɛ
• Adwuma laptop a wowia anaasɛ abubu bere a woretu kwan: MDM lock ne zero-downtime recovery
• Nnɔmba ahorow a egye ntɛmpɛ