A ye sarako gundo walima HIPAA Dosiyɛri ci mɔgɔ jugu ma k’a sɔrɔ a ma kɛ cogo si la: Recall and Breach Triage¶

Ni i ye Cɛ gosi imɛri la min kɔnɔ sarako jatebɔsɛbɛn min ma siri, baarakɛla ka Lakanali Sosiali nimɔrɔw, kiliyanw ka jɛkulu ka wariko, walima Kɛnɛya kunnafoni lakananenw (PHI), ani k’a dɔn segin fila o kɔfɛ ko Outlook walima Gmail ye "David Miller (Kɛnɛma feerekɛla)" dafa a yɛrɛma "David Miller (Kɔnɔna CFO)" nɔ na, o bɛ teliya ka sariya, sariyasun, ani sibɛri lakanani kɔrɔtɔko. I bɛ min kɛ miniti 5 fɔlɔw kɔnɔ o b’a jira n’i bɛ se ka fɛɛrɛ tigɛ ka don dosiye kɔnɔ sanni a sɔrɔbaga k’a da wuli, ani i bɛ min kɛ lɛrɛ 24 fo 72 fɔlɔw kɔnɔ o b’a jira n’i ka jɛkulu bɛna ko kɛlenw sɛbɛncogo kɔrɔlen dɔ sɔrɔ min bɛ kɛ i yɛrɛ ye min bɛ kɛ tuma bɛɛ walima ni sariyasen 33nan (lɛrɛ 72 wajibiyalen kɔlɔsili kunnafoni)** kɔnɔ, o ye U.S. ka baarakɛyɔrɔ la. HIPAA ka sariya tiɲɛni kunnafoni (45 CFR 164.400-414), walima jamana ka kunnafonidilanw tiɲɛni sariyaw.

Ni nin bataki cicogo jugu in bɛ tali kɛ wariko cikanw na minnu bɛ baara la, ka wari ɲini, walima ni jɛkulu ka inbox ye min bɛ se ka tiɲɛ, i ka i ka sigida sariya labatoli walima ɛntɛrinɛti kan kojugubakɛlaw ka kunnafonidisira wele (walima i ka sigida kɔrɔtɔko nimɔrɔ, 911 Ameriki ani Kanada, 112 Erɔpu tɔnba bɛɛ kɔnɔ, 999 Angletɛri, ni farikolo lakanani bɛ farati la; a’ ye a lajɛ kɔrɔtɔko nimɔrɔw). O yɔrɔnin bɛɛ, an balimakɛw ka ɲɛminɛbagaw cross-reference kan accidental Zoom walima Teams screen-share leaks ani recording kɔsegin, . kasaara kɛlenw ka kunnafonidilanw binna, git gundo bɔli, ani ko kɛlenw sɛgɛsɛgɛli, ani kɔrɔtɔko yɔrɔjan baarakɛyɔrɔ lakanani ani kunnafoniw gundo i n’a fɔ i bɛ containment sequence waleyali kɛ cogo min na jukɔrɔ.

Aw bɛ o kɛ sisan¶

1. Ni o dosiye cilen don i n’a fɔ Cloud Link (OneDrive, SharePoint, Google Drive, Dropbox, Box), AW KA PERMISSIONS KAN LINK KAN FƆLƆ (0 to 30 seconds) sanni i k’a ɲini ka bataki hakili jigin. Hali ni imɛri sigilen bɛ kɛnɛma sɔrɔbaga dɔ ka inbox kɔnɔ kaban, imɛri hakilijigin tɛ se ka kɛ yɔrɔ min na, ni i ye sankaba filen ka tila-tilacogo Changer ka kɛ "Mɔgɔ kɛrɛnkɛrɛnnenw (Remove recipient)" walima "Restricted" ye, o bɛ doncogo tigɛ 1 second o la ni i ye jɛgɛnsira digi, o bɛ "Access Denied" ekran segin.
2. Ni i bɛ hali bi "Undo Send" finɛtiri kɔnɔ min bɛ segin 5 fo 30 kɔnɔ Gmail walima Outlook kɔnɔ ɛntɛrinɛti kan, i bɛ digi Undo ka i ka ekran jukɔrɔ o yɔrɔnin bɛɛ. Siɲɛ kelen the "Undo" tositi pankarti tununna, Simple Mail Transfer Protocol (SMTP) server ye cikan bila ka bɔ i ka bɔyɔrɔ la.
3. Ni i bɛ baara kɛ ni Microsoft 365 / Exchange Online ye ani ka bataki ci i baarakɛɲɔgɔn dɔ ma i ka tɔn kelen ka jɛkulu KƆNƆ (same Exchange tenant), ka fɛn dɔ daminɛ Recall This Message o yɔrɔnin bɛɛ, ani i kana tugu-tugu-cikan ci k'a fɔ ko "N b'i deli, i kana n ka bataki kɔrɔ da wuli" fɔlɔ. Ka bataki filanan ci min bɛ kɛ ni ɲɛnajɛ ye, n'a barokun ye ko "URGENT: DO NOT OPEN PREVIOUS EMAIL" o bɛ ɲininkali lawuli ani ka kɛ sababu ye ka bataki sɔrɔbaga bila ka bataki fɔlɔ digi fɔlɔ. Bi Microsoft 365 Cloud Message Recall kɔnɔ, Exchange bɛ cikan kalanbali bɔ a baarakɛɲɔgɔn dɔ kɔnɔna na, a makuntɔ hali n’u ye tabali kunnafonisɛbɛn pankarti ye, n’a y’a sɔrɔ u ma cikan farikolo da wuli.
4. Aw ye o Outlook faamuya Recall This Message A tɛ baara kɛ abada kɛnɛma sɔrɔbagaw ye (@gmail.com, . @yahoo.com, walima sosiyete wɛrɛ ta @client.com domain). Ni email ye i ka sosiyete ka SMTP dancɛ tigɛ ka taa kɛnɛma mail server dɔ la, i ka Exchange server bɛ zeru yamaruya ka se ka don sosiyete wɛrɛ ka server kɔnɔ ani ka raw binary attachment dɔ bɔ (.xlsx, . .pdf, . .csv). A digilen Recall kɛnɛma bataki dɔ kan, a bɛ bataki filanan maloyalen dɔrɔn ci kɛnɛma mɔgɔ ma k'a fɔ ko "[Cibaga] b'a fɛ ka cikan hakili jigin...", k'u lasɔmi u k'i ka bataki fɔlɔ lajɛ.
5. A lajɛ ni jatebɔsɛbɛn min nɔrɔlen bɛ o kɔnɔ, tab dogolenw, kulu dogolenw, walima PivotTable caches (xl/pivotCache/pivotCacheRecords1.xml). Sarako ni M&A bɔli caman bɛ kɛ ni sɛgɛsɛgɛlikɛla dɔ ye "Executive Salaries & SSNs" kuluw dogo walima ka source tab dɔ bɔ yen, o kɔfɛ a ye email ci... .xlsx baarakɛgafe miirili dɔrɔn de bɛ ye. An .xlsx file ye ZIP archive ye min bɛ source rows bɔlenw mara a kɔnɔna XML PivotTable cache kɔnɔ fo ka saniya.
6. Aw ye aw ka kɔnɔna kunnafoniw lakanani ɲɛmɔgɔ ladɔnniya (DPO), Kunnafoni lakanani ɲɛmɔgɔba (CISO), Kunnafoni-cimago ɲɛmɔgɔ, walima Sariya/HR sariya labatoli jɛkulu sanga 1 fo 2 fɔlɔ kɔnɔ. Aw kana a ɲini abada ka PII, sarasɛbɛn, walima HIPAA bɔli dogo walima ka kumaɲɔgɔnya kɛ aw yɛrɛ la ni kɛnɛma sɔrɔbaga ye k’a sɔrɔ sariya ma kɔlɔsili kɛ. GDPR sariyasen 33 kɔnɔ, lɛrɛ 72 waati gɛlɛn min bɛ kɛ ka kunnafonidilanw ladɔnniya, o bɛ daminɛ ka taamasiyɛn kɛ waati min na baarakɛla o baarakɛla y’a dɔn ko o sariya tiɲɛna, o la sa, ka fili dogo tile saba kɔnɔ, o bɛ sosiyete ka sariya kunnafonidi finɛtiri jeni, ka fili lakika kɛ sariya labatoli tiɲɛni ye min bɛ se ka ban.

Desizɔn jiri: Gundola imayili minɛcogo jugu ani sariyaw sɛgɛsɛgɛli¶

Aw bɛ nin dankarili jiri in labato senfɛ-senfɛ ka da dosiye in nɔrɔlen don cogo min na ani ni a sɔrɔbaga jugu bɛ aw ka jɛkulu kɔnɔ walima a kɔkan.

flowchart TD
    A["Sarako gundo, Client PII, walima HIPAA File min cilen bɛ mɔgɔ jugu ma imɛri la"] --> B{"Yala o dosiye in tilalen don Cloud Link fɛ (OneDrive / SharePoint / Google Drive / Box) walima i n’a fɔ Raw File Attachment (.xlsx / .pdf / .csv)?"}
    B -->|"Sankaba jɛgɛn (OneDrive / SharePoint / Google Drive)"| C["O yɔrɔnin bɛɛ, aw bɛ dosiyew tilatilali labɛnw da wuli -> Delete link / Remove external user -> Aw ye Audit Log lajɛ walasa k’a dɔn ni dosiye lajɛra/a telesarsera"]
    C --> D{"Yala Audit Log ye 0 views/downloads jira ka sɔrɔ ka link faga wa?"}
    D -->|"AW: 0 Views / 0 Téléchargements"| E["BREACH AVERTED: Screenshot audit log min b’a jira ko zeru don ka sɔrɔ ka link bɔ -> Log near-miss ni Security/DPO ye"]
    D -->|"AYI: A sɔrɔbaga ye dosiye da wuli kaban walima a ye a telesarse"| F["Aw bɛ taa ɲɛfɛ ka taa Formal Containment & Legal/DPO Escalation la"]
    B -->|"Raw File Attachment (.xlsx / .pdf / .docx) walima Farikolo Sɛbɛnni Sensitive"| G{"Yala a sɔrɔbaga jugu ye INTERNAL (Société kelen / Exchange Tenant) ye walima EXTERNAL (Société wɛrɛ / Personal Email) ye wa?"}
    G -->|"INTERNAL Baarakɛɲɔgɔn (M365 kelen / Google Workspace Org)"| H["1. Outlook Cloud Message Recall (Kopi kalanbaliw bɔ) ANI/walima ka IT Admin wele o yɔrɔnin bɛɛ walasa ka Exchange Admin Center Content Search Purge / Google Workspace Investigation Tool Delete baara"]
    G -->|"KƆNƆBƆLI Sɔrɔbaga (Kiliyan, Feerekɛla, walima Dunan) ."| I["I KAN’a digi Outlook Recall kan (A bɛ dɛsɛ kɛnɛma & a bɛ a sɔrɔbaga lasɔmi) -> Ni filen tun bɛ ni Azure RMS / Purview Sensitivity Encryption ye, i ka josariyaw bɔ yen joona"]
    H --> F
    I --> F
    F --> J["Aw ye kunnafoni di Lɛrɛ 1 kɔnɔ DPO / Kunnafoni-cimago ɲɛmɔgɔ / CISO / HR ma ni Message-ID tigitigi ye, Waati taamasiyɛn, Sɔrɔbaga, ani Donanw yɔrɔw jiralen don"]
    J --> K["Ni Sariya/DPO sɔnna: Aw bɛ telefɔni sɔrɔbaga wele + ka Demande formel ci for Permanent Deletion & Signed Certificate of Destruction"]

Yɔrɔ fɔlɔ: Fɛɛrɛbɔ seginni fɔlɔ-segin 60 (Min bɛ baara kɛ tiɲɛ na ni min bɛ dɛsɛ) .¶

Ni i y’a ye ko gundola bataki dɔ taara dɔrɔn ladɛrɛsi jugu la, segin kelen-kelen bɛɛ bɛ jate bawo 50 percent ka tɔnw ka batakiw dabɔ miniti 3 fɔlɔ kɔnɔ u selen kɔ. Fɛɛrɛbɔlan tigitigi min bɛ se ka kɔsegin, o baara min bɛ bɛn i ka imeyili plateforme ma ani attachment suguya ma:

1. Ɲɛjirali A: O dosiye tun ye SharePoint, OneDrive, Google Drive, walima Dropbox jɛgɛnsira ye (100% Killable) .¶

Ni i ka jɛkulu bɛ dosiyew nɔrɔ i n’a fɔ sankaba jɛgɛn (walima n’i ye jɛgɛnsira dɔ nɔrɔ), i bɛ yɔrɔjan fagali-switch minɛ hali ni imɛri cilen kɔfɛ ani a dabɔra: - Microsoft OneDrive / SharePoint Ɛntɛrinɛti kan: 1. OneDrive walima SharePoint da wuli, ka filen digi kinin fɛ, ka Manage Access sugandi. 2. Links jukɔrɔ, Trash Can (Delete Link) taamasiyɛn digi share link kɛrɛfɛ, ani Direct Access jukɔrɔ, i ka a sɔrɔbaga tɔgɔ digi ani ka yamaruyaw Changer ka kɛ Remove direct access ye. 3. Aw ye Ellipsis (...) -> Details -> Activity (walima i ka Microsoft 365 Admin ka Microsoft Purview Audit Log lajɛ FileAccessed / . FileDownloaded ko kɛlenw) walasa k’a jira sariya siratigɛ la ni a sɔrɔbaga delila ka jɛgɛnsira digi sanni i k’a faga. - Google Drive / Google Docs / Google ka sɛbɛnw: 1. Filen in digi kinin fɛ Google Drive kɔnɔ -> Share. 2. Jɛkulu sɔrɔli Changer ka bɔ "Anyone with the link" la ka kɛ Restricted ye, ani ka sɔrɔbaga jugu ka email ladɛrɛsi bɔ Mɔgɔ minnu bɛ ni don ye. 3. Ni Google Sheet dabɔlen bɛ a sɔrɔbaga fɛ sisan a ka ɛkran kan sisan, i bɛ Settings (Gear Icon) digi Share modal kɔnɔ ka "Lajɛbagaw ni kuma fɔbagaw bɛ se ka sugandili ye ka telesarse, ka sɛbɛnni kɛ, ani ka kopi kɛ" ka sɔrɔ k’u gɛn ka bɔ yen. 4. Aw ye View -> Activity dashboard -> All viewers lajɛ Google Doc/Sheet kɔnɔ walasa ka miniti o miniti waati taamasiyɛn tigitigi ye min ye sɛbɛn in lajɛ.

2. Ɲɛjirali B: Microsoft Outlook / Exchange Online Recall This Message (Matrix kɔnɔna ni kɛnɛma)¶

Baarakɛla caman bɛ miniti nafamaw tiɲɛ ka Outlook ka Recall This Message butɔn digi k’a sɔrɔ u m’a dɔn waati min na Exchange bɛ se ka bataki sama tiɲɛ na ka segin kɔ:

Outlook Message Recall daminɛcogo ka ɲɛ (For Internal Same-Tenant Mistakes Only)¶

1. Outlook (Desktop, New Outlook, walima Outlook on the Web) kɔnɔ, i ka Sent Items foli digi kininbolo fan fɛ.
2. I ka email min bila sira jugu kan, i k’o digi siɲɛ fila walasa a ka da wuli a yɛrɛ ka pop-up window danfaralen kɔnɔ (Hakilijigin bɛ dogo Classic Outlook kalanni yɔrɔ la).
3. Sanfɛla bɔrɔ kan, taa Cikan -> Waleyaw -> I hakili jigin nin cikan in na (walima New Outlook / Web kɔnɔ, i ka Cikan hakili jigin taamasiyɛn digi cikan cilen sanfɛ).
4. "Delete unread copies of this message" sugandi ani ka "A fɔ n ye ni hakilijigin kɛra walima ni a ma ɲɛ sɔrɔbaga kelen-kelen bɛɛ la" lajɛ, o kɔfɛ OK digi.

--- .

Yɔrɔ 2nan: Tiɲɛniw jateminɛni kiritigɛlaw fɛ (Mun tun bɛ o dosiye kɔnɔ tiɲɛ na?)¶

Sani i ka o ko fɔ i ka kunnafoniw lakanani ɲɛmɔgɔ ye (DPO), Sariyako ɲɛmɔgɔso, walima ɲɛmɔgɔ, bɛ miniti 3 ta ka i ye dosiye tigitigi min ci ka bɔ i ka Fɛn cilenw foli kɔnɔ, k’o da wuli ani k’a kɔnɔkow lajɛ.

1. "Dɔnniya dogolenw" 4 minnu bɛ Excel kɔnɔ (.xlsx) ani PDF filew¶

N’i ye Excel baarakɛ gafe walima PDF ci imɛri la k’a miiri ko i ye kulu sensitifw bɔ fɔlɔ, i ka nin layini dogolen naani ninnu lajɛ joona: - Jaan 1: Jɛkulu dogolenw, kulu dogolenw, ani baarakɛsɛbɛn dogolenw / "VeryHidden": Mɔgɔ o mɔgɔ bɛ a sɔrɔ .xlsx file bɛ se ka Unhide Columns / Unhide Worksheets digi (walima ka VBA Editor da wuli Alt + F11 ka fɛn caman Changer xlSheetVeryHidden ka xlSheetVisible) segin 5 kɔnɔ. - Jaan 2nan: Excel PivotTable Cache Jaan (pivotCacheRecords1.xml): - A ka c’a la, i ye PivotTable kuncɛlen dɔ jɔ ka bɔ HR master tabali 10.000 la min kɔnɔ Baarakɛlaw tɔgɔw, So ladɛrɛsiw, Saraw, ani SSNw bɛ sɔrɔ, o kɔfɛ i ye HR master worksheet tab 10.000-row bɔ, ka .xlsx filen ni PivotTable tab kuncɛlen dɔrɔn ye, k’a ci feerekɛla dɔ ma imɛri la. - Ka kɛɲɛ ni a daminɛ ye, Excel bɛ sɔrɔyɔrɔ 10000 bɔlenw bɛɛ lajɛlen kopi dafalen mara baarakɛgafe kɔnɔna PivotCache hakilijagabɔlan kɔnɔ (Save source data with file). Mɔgɔ o mɔgɔ bɛ jateden kelen-kelen bɛɛ digi siɲɛ fila i ka PivotTable kɔnɔ, o bɛ Excel ka Show Details (Drill-Down) baarakɛcogo daminɛ, o min bɛ HR master tabali bɛɛ bɔlenw bɛɛ labɛn kokura ni baarakɛla bɛɛ ka sara ni SSN ye sɛbɛn kura kan. - Jaan 3: Sɛbɛnw bɔko tariku & Yɛlɛma minnu tugura ɲɔgɔn kɔ (.docx / Cloud Docs): Ni Track Changes tora kɛnɛ kan k’a sɔrɔ i ma Accept All Changes digi, walima n’i ye sankaba sɛbɛn dɔ tila ni Editor doncogo ye (o min b’a to Version History dafalen bɛ se ka lajɛ), a sɔrɔbaga bɛ se ka sɛgɛsɛgɛli bɔlen bɛɛ kalan. - Jaan 4nan: "Black Highlighter" PDF Redactions bɛnbali: Ka rectangle noir cogoya walima highlighter black ja SSN walima banki jatebɔsɛbɛn nimɔrɔ kan Word/Preview kɔnɔ ani k’a mara i n’a fɔ PDF, o tɛ t sɛbɛnni jukɔrɔla bɔ a sɔrɔbaga bɛ se ka kɛsu nɛrɛma jira, ka digi Ctrl + C, ani ka SSN sɛbɛn jɛlen nɔrɔ Notepad kɔnɔ.

2. Kunnafoni minnu bɔra kɛnɛ kan, olu ka sariyasun juguya danfara¶

--- .

Yɔrɔ 3nan: Laseli kɛcogo kɔnɔna na ani ka kuma sɔrɔbaga jugu fɛ (daɲɛ ni daɲɛ misaliw) .¶

Ni i y’a ɲini ka fɛɛrɛbɔ sira tigɛ ka ban ani k’a dɔn kunnafoni minnu tun bɛ dosiye kɔnɔ, i ka nin sɛgɛsɛgɛli kɛcogo fila in labato:

Taabolo fɔlɔ : Kɔnɔnafili teliya la ka taa i ka DPO / Kunnafoni dogolenw ɲɛmɔgɔ / CISO / ɲɛmɔgɔ fɛ (miniti 15 fo 60 kɔnɔ)¶

Aw ye aw ka sosiyete ka Lakanali ko kɛlenw jaabi (security@ / . privacy@ / . dpo@) kanal ani i ka direct manager o yɔrɔnin bɛɛ ni nin tiɲɛ duuru tigitigiw ye: 1. Waati taamasiyɛn tigitigi & Waatibolodacogo: "A cilen don bi 14:12 UTC." 2. Cɛsiribaga tigitigi & Sɔrɔbaga jugu ka Email Adrɛsi (ani u ye mɔgɔ minnu ye): "Cɛ ka ci." dmiller@vendor-corp.com (feerekɛla sirilen dɔ min bɛ yen NDA kɔrɔ) sanni dmiller@ourcompany.com." (HIPAA ni GDPR 4-factor risk assessments kɔnɔ, ka HIPAA datugulen jɛkulu wɛrɛ, banki, walima feerekɛla sirilen dɔ ka bataki ci bala la NDA kɔnɔ, o bɛ farati hakɛ dɔgɔya kosɛbɛ ka tɛmɛ mɔgɔ dɔnbali dɔ ka bataki cili kan @gmail.com ladɛrɛsi.) 3. Attachment Type & Encryption Status: "Attachment i n'a fɔ raw." .xlsx file, no password" OR "A bɛ tila i n'a fɔ SharePoint jɛgɛn; a banna 14:14 UTC ni 0 ye jatebɔ sɛbɛn kɔnɔ." 4. Exact Data Elements & Row Count Inside: "File tun bɛ Q3 bonus hakɛw ni Baarakɛlaw ka IDw sinsinni 42 kɔnɔ; ZERO Social Security Numbers, ZERO bank numbers, ani ZERO home addresses." 5. Waleya minnu kɛra fo ka na se bi ma: "SharePoint jɛgɛnsira bɔra; i ka bolonɔbila makɔnɔni na Tiɲɛnisɛbɛn ɲinini kan."

Taabolo 2nan : Ka a sɔrɔbaga wele ani ka "Certificat de déstruction / Attestation de déletion" bolonɔbilalen sɔrɔ.¶

Ka kɛɲɛ ni U.S. HHS ka biro min ɲɛsinnen bɛ jamanadenw ka josariyaw ma (OCR) HIPAA 4-Factor faratiw jateminɛ ( ) .45 CFR 164.402) ani Erɔpu kunnafonidilaw ka tɔnba (EDPB) Ladilikanw 9/2022, ni mɔgɔ min ma laɲini (kɛrɛnkɛrɛnnenya la, tɔnba baarakɛla dɔ, avoka, jatebɔla, walima kɛnɛyaso min dalen bɛ a la) a y’a jira joona sɛbɛn fɛ ko u ma o dosiye telesarse/ka ci ani ko u ye o bataki bɔ kudayi u ka Inbox ani Deleted Items / Trash kɔnɔ, sariyasunbatigiw bɛ to ka sira di jɛkulu ma a ka ko in jate ** min ma bɔ a ka ca a la, a bɛ se ka kɛ ko a bɛ se ka kɛ**.

Ni i ka sariya/kunnafoni ɲɛmɔgɔ sɔnna, i ka telefɔni sɔrɔbaga wele fɔlɔ, i ma se ka min sɔrɔ, i ka tugu o kɔ joona ni nin Inadvertent Disclosure & Deletion Attestation Email ye min bɛ kɛ cogo labɛnnen na (i ka sɛbɛnfura fɔlɔ bɔ sani i ka ci):

Subject: URGENT: Inadvertent Confidential Email Notice & Request for Deletion (Sent [Date] at [Time])

Dear [Recipient Name],

Earlier today at [Time], an email with the subject line "[Exact Subject Line of Misdirected Email]" was inadvertently sent to your email address due to an address auto-complete error.

That message and its attachment contain confidential and legally protected information intended solely for an internal recipient. If you have not yet opened the message or attachment, we kindly ask that you do NOT open, download, copy, or forward it.

To help us satisfy our regulatory compliance and audit obligations, please complete these two quick steps right now:

1. Permanently delete the original email (and any downloaded copy of the attachment) from your Inbox, Downloads folder, and your "Deleted Items / Trash" folder (in Outlook on Windows, you can select the email and press Shift + Delete).
2. Reply directly to this email with the following one-sentence confirmation for our compliance log:

   "I confirm that I have permanently deleted the email sent on [Date] with the subject '[Original Subject]' and any attachments from my inbox, local storage, and trash/deleted items without retaining, copying, or forwarding any copy of the contents."

Thank you sincerely for your integrity and immediate assistance in resolving this error.

Best regards,
[Your Name / Title / Privacy Officer Contact]

--- .

Yɔrɔ 4nan: Fɛɛrɛbɔlan banbaliw walasa i kana mɔgɔ jugu walima kunnafoni dogolenw ci tugun abada¶

Ni teliya la triage dafara, i bɛ miniti 10 kɛ ka nin lakanafɛn duuru jɔlenw da Microsoft Outlook, Gmail ani Excel kɔnɔ walasa fili min bɛ kɛ a yɛrɛma walima PivotTable cache dogolen tɛ se ka kɛ sababu ye ka sariya tiɲɛni wɛrɛ kɛ abada:

• 1. Delete Poisoned Auto-Complete Entries (Nickname Cache) O yɔrɔnin bɛɛ:
  • Outlook walima Gmail kɔnɔ, kɛnɛma mɔgɔ tɔgɔ sɛbɛnni daminɛ To: kɛsu kɔnɔ fo hakilina min bɛ jigin, o ka bɔ kɛnɛ kan, o kɔ, i ka ** digi .X (Delete)** taamasiyɛn min bɛ u tɔgɔ kinin fɛ lisi kɔnɔ min bɛ jigin walasa auto-complete kana u jira abada kasaara la tugun.
• 2. Turn On Maximum "Undo Cikan / Lasegin bila kɔfɛ" (30 Seconds Gmail kɔnɔ, 2 Minutes Outlook kɔnɔ):
  • Gmail: Taga Settings (Gear) -> Settings bɛɛ lajɛ -> General -> Undo Send ani ka cancellation waati Changer ka bɔ 5 seconds ka se a dan na ** .30 seconds**.
  • Outlook Desktop (Classic): Taga Sariyaw -> Sariyaw ni lasɔminiw ɲɛnabɔ -> Sariya kura -> Sariya waleya cikanw kan n bɛ minnu ci -> Lasegin bila kɔfɛ 2 miniti (ni danfara don ni barokun kɔnɔ "#now"). Miniti 2 Outbox buffer dɔ bɛ minɛ 95 percent ka attachment ni recipient filiw sani email ka bɔ i ka ɔridinatɛri kɔnɔ abada.
• 3. Kɛnɛyaso sɔrɔbagaw lasɔmini pankartiw (MailTips ka Exchange / External Label kɔnɔ Gmail kɔnɔ):
  • Bi Microsoft 365 ani Google Workspace bɛ kɛnɛma imɛri puwɛntiw jira ni jɛman/orange ye ani ka pankarti dɔ jira min sɛbɛnnen bɛ "Nin sɔrɔbaga in bɛ i ka jɛkulu kɔkan" sanni i ka Send digi. Aw kana aw ɲɛmajɔ abada sɔrɔbaga ka puce jɛman/orange la ni aw bɛ kɔnɔna jatebɔsɛbɛnw nɔrɔ a la.
• 4. Excel ka Built-In baara Document Inspector (File -> Info -> Check for Issues -> Inspect Document) Sani Kɛnɛma Email Bɛɛ ka Bɔ:
  • Sani i ka dɔ nɔrɔ a la .xlsx walima .docx file ka taa imɛri la, i ka Sɛgɛsɛgɛli sɛbɛn boli. A bɛ Jɛkulu ni kuluw dogolenw, Baarakɛsɛbɛn dogolenw, Kɔnɔkow yebaliw, Sɛbɛnw nafaw/sɛbɛnnikɛlaw, ani PivotTable Data minnu maralen bɛ, taamasiyɛnw jira a yɛrɛma, ka Bɛɛ bɔ butɔn digi kelen di i ma.
  • Ni aw bɛ tabali kuncɛlen ci kɛnɛma, aw bɛ seliw kopi kɛ ka baara kɛ ni u ye Paste Special -> Values (V) ka don baarakɛgafe gansan kura kɔnɔ (walima ka sɛbɛnfura baarakɛta dɔrɔn bila ka taa .pdf) o la zeru formulaw, tab dogolenw, walima PivotCaches bɛ taa ni dosiye ye.
• 5. Password-Protect Sensitive Files Out-of-Band (Wali ka baara kɛ ni Sensitivity Labels ye):
  • Tuma o tuma n’i ka kan ka sarasɛbɛnw, impositi sɛbɛnw, walima PII ci i n’a fɔ farankan, i ka Excel/PDF filen siri ni AES-256 tɔgɔlasɛbɛn barikama ye (File -> Info -> Protect Workbook -> Encrypt with Password) ani ka tɔgɔlasɛbɛn ci a sɔrɔbaga ma kan wɛrɛ fɛ min bɛ danfara pewu (i n’a fɔ SMS sms cikan, Siginiden, Slack, walima telefɔni weleli, abada imɛri kelen kɔnɔ). Hali ni i ye email ci a sirilen na .xlsx dosiye ka taa David Miller jugu ma, ni SMS tɔgɔlasɛbɛn tɛ min taara David Miller ka telefɔni kinin fɛ, dosiye ye biriki kripto ye min tɛ se ka kalan (0% kunnafoniw tiɲɛni min bɛ se ka fɔ HIPAA ni GDPR safe-harbor encryption danfaralenw kɔnɔ).

--- .

Sigidaw ka kɔrɔtɔko nimɔrɔw ani baaradaw ka sariyaw¶

Hali ni gundola imɛri bɔli kasaara la, o ye sariyaw ni ɛntɛrinɛti lakananiko ye sanni ka kɛ 911 kɔrɔtɔko ye farikolo ta fan fɛ (fo ni a farala farikolo bagabagali walima wari ɲinini teliya kan, o cogo la, i ka 911 wele Ameriki/Kanada, 999 Angletɛri, 112 UE, walima 000 Ɔsitarali), jɛkuluw ka kan ka tugu o kunnafoniw lakanani sariyaw la minnu bɛ sariya kɔnɔ faamaw ni kunnafonidi waati wajibiyalenw :

Etazuni ani Kanada¶

• U.S. ka baarakɛyɔrɔ la. HIPAA Kɛnɛyako sariya tiɲɛniw (Protected Health Information): A bɛ labɛn U.S. Kɛnɛya ni hadamadenya baarada ka biro min ɲɛsinnen bɛ jamanadenw ka josariyaw ma (HHS OCR) OCR ka sariya tiɲɛni dakun fɛ (ocrportal.hhs.gov). Sariya tiɲɛni minnu bɛ nɔ bila 500 or more mɔgɔ kelen-kelen bɛɛ ka kan ka fɔ HHS OCR la k’a sɔrɔ u ma mɛn ani kalandriya tile 60 kɔnɔ u sɔrɔlen kɔfɛ; sariya tiɲɛni minnu bɛ nɔ bila fewer than 500 mɔgɔ kelen-kelen bɛɛ ka kan ka sɛbɛn ani ka fɔ tile 60 kɔnɔ kalandriya san laban kɔfɛ.
• AN. Nafolo, Takisi & Jamana PII tiɲɛniw: Takisi baarakɛlaw ni baarakɛlaw minnu bɛ W-2/sarako kunnafoniw sonya, olu ka kan ka u yɛrɛ di IRS Stakeholder Liaison ani FBI IC3 (ic3.gov). Nafolotigi minnu tɛ bankiw ye, minnu bɛ FTC lakanani sariya kɔnɔ, olu ka kan ka FTC ladɔnniya tile 30 kɔnɔ, ni u ye kunnafoniw sɔrɔ minnu ma yamaruya, minnu ma siri, minnu bɛ nɔ bila 500+ feerekɛlaw. U.S. jamana 50 bɛɛ bɛ sariya tiɲɛni kunnafoni finɛtiriw labato (a ka c’a la tile 30 fo 45).
• Kanada (PIPEDA & Provincial Privacy Laws): Ka sariya tiɲɛniw fɔ minnu bɛ "farati lakika lase tiɲɛniba ma (RROSH)" ka taa Kanada ka danbeko komisɛri ka biro la (OPC, . priv.gc.ca) ni a bɛ se ka kɛ joona, ani ka di marabolo komisɛriw ma (CAI min bɛ Kebɛk sariya 25nan kɔnɔ, IPC min bɛ Ontario jamana na, o kama PHIPA).

Angletɛri jamana na¶

• Angletɛri kunnafoniko ɲɛmɔgɔso (ICO): UK GDPR sariyasen 33 kɔnɔ, kunnafonidilaw ka kan ka mɔgɔ ka kunnafoniw tiɲɛni kofɔ ICO (ico.org.uk/for-organisations/report-a-breach/ walima 0303 123 1113) lɛrɛ 72 kɔnɔ, a dɔnni kɔfɛ, fo ni a ka c’a la, o sariya tiɲɛni tɛ kɛ sababu ye ka farati lase mɔgɔ kelen-kelen bɛɛ ka josariyaw n’u ka hɔrɔnya ma.

Erɔpu Kelenyatɔnba¶

• GDPR sariyasen 33nan & sariyasen 34nan (UE jamana 27 bɛɛ): Wajibiyalen don Lɛrɛ 72 laseli waati ka di jamana ka kunnafonidilan ɲɛmɔgɔ ma (CNIL Faransi, BfDI Alimanjamana, AEPD Ɛsipaɲi, DPC Irlandi, Garante Itali, AP jamana na) ka tugu EDPB ka laadilikanw kɔ 9/2022.

Ɔsitarali ani Zelande kura¶

• Ɔsitarali jamana (Notifiable Data Breaches / NDB Scheme): A bɛ labɛn Ostrali jamana kunnafoniko ɲɛmɔgɔso ka biro fɛ (OAIC, . oaic.gov.au). Jɛkuluw bɛ se tile 30 ma walasa k’a lajɛ ni kunnafonidilanw tiɲɛni min bɛ se ka kɛ, o bɛ se ka kɛ sababu ye ka tiɲɛ jugu lase u ma (ani ni fɛɛrɛ tigɛlenw, i n’a fɔ ka teliya ka bɔli kɛ sani baara jugu kɛ, o ye tiɲɛniba bali).
• Zélande kura (Privacy Act 2020): Aw ye Gundola Komisɛri ka biro ladɔnniya (OPC, . privacy.org.nz) NotifyUs fɛ lɛrɛ 72 kɔnɔ, ka sɔrɔ ka danbe tiɲɛni dɔ sɔrɔ min bɛ se ka ladɔnniya.

Ɛndujamana ni Azi Pasifiki jamanaw na¶

• Endi jamana (CERT-In & . DPDP Act): Sibɛri lakanani ni kunnafonidilanw bɔli ko kɛrɛnkɛrɛnnenw fɔ CERT-In (incident@cert-in.org.in) lɛrɛ 6 kɔnɔ ani ka Data Protection Board of India ladɔnniya DPDP sariya kɔnɔ.
• Singapore (PDPA) & Zapɔn (APPI): Singapuri, aw bɛ PDPC ladɔnniya kalandriya tile 3 kɔnɔ (lɛrɛ 72). Zapɔn jamana na, aw ka kunnafoni fɔlɔ di Mɔgɔ yɛrɛ ka kunnafoniw lakanani jɛkulu ma (PPC) tile tile 3 fo tile 5 kɔnɔ.

--- .

Ɲininkali minnu bɛ kɛ tuma caman na¶

Yala ni i ye "Recall This Message" digi Microsoft Outlook kɔnɔ, o bɛ imayili dɔ bɔ yen min cilen bɛ Gmail ladɛrɛsi dɔ la walima baarakɛda wɛrɛ ka imɛri baarakɛyɔrɔ la wa?¶

Ayi, abada. Outlook ka "Recall This Message" baarakɛcogo bɛ tali kɛ Microsoft Exchange kɔnɔna bataki-kɛsu cikanw na minnu bɛ baara kɛ dɔrɔn ni ciden ni cibaga fila bɛɛ sigilen bɛ Microsoft 365 / Exchange jɛkulu kelen tigitigi kɔnɔ. Ni i ye bataki ci kɛnɛma mɔgɔ dɔ ma `@gmail.com` ladɛrɛsi walima kiliyan dɔ ta `@othercompany.com` ladɛrɛsi ani ka Hakililajigin digi, kɛnɛma bataki ciyɔrɔ bɛ bɔli cikan jate minɛ, ka kunnafoni jɛlen filanan di min b’a fɔ ko "[I Tɔgɔ] b'a fɛ ka cikan hakili jigin '[Kunnafoni]' la. O kunnafoni filanan b’i ka fili jira ani k’a jira ko kɛnɛma mɔgɔ bɛna imɛri fɔlɔ da wuli o yɔrɔnin bɛɛ.

Ni n ye Excel walima PDF filen siri ni tɔgɔlasɛbɛn barikama ye ka sɔrɔ k’a ci mɔgɔ jugu ma bala la (wa n ma tɔgɔlasɛbɛn bila imayili kɔnɔ), yala hali bi o ye HIPAA walima GDPR kunnafoniw tiɲɛni ye min bɛ se ka fɔ wa?¶

Ayi, U.S. HIPAA ka sariya tiɲɛni kunnafoni (`45 CFR 164.402`) ani EU/UK GDPR sariyasen 34nan (EDPB ka laadilikanw 9/2022) bɛ **Encryption Safe Harbor** jɛlen di. Ni attachement min cilen don imɛri la bala la, o tun sirilen don ni encryption barikama ye min bɛ bɛn izini ma (i n’a fɔ AES-128 walima AES-256 bi Excel fɛ `.xlsx` tɔgɔlasɛbɛn lakanani, 7-Zip AES-256, walima Microsoft Purview Sensitivity Labels) ani daɲɛ dogolen ma ci abada mɔgɔ jugu ma, gundola kunnafoniw bɛ to ciphertext kalanbali ye. I ka near-miss sɛbɛn kɔnɔna na ni i ka lakana jɛkulu ye, nka o tɛ kɛ i yɛrɛ ka kunnafoniw tiɲɛni ye min bɛ se ka fɔ.

Yala ne ka sosiyete ka IT baarakɛyɔrɔ bɛ se ka e-mail min ci n baarakɛɲɔgɔn dɔ ma an ka sosiyete kɔnɔ bala la, ni n baarakɛɲɔgɔn y’a da wuli kaban wa?¶

Awɔ. Hali n’i yɛrɛ ka Outlook "I hakili jigin nin cikan in na" butɔni bɛna dɛsɛ ni i kɔnɔna baarakɛɲɔgɔn ye e-mail digi kaban k’a taamasiyɛn ko Read, Microsoft 365 Exchange Administrator walima Google Workspace Super Admin ye sariya labatoli saniya fanga kɔrɔta. Microsoft 365 kɔnɔ, ɲɛmɔgɔ dɔ bɛ se ka baara kɛ ni Defender ye Office 365 Threat Explorer kama walima ka Exchange Online PowerShell baara `New-ComplianceSearchAction -Purge -PurgeType HardDelete` yamaruya ka bataki bɔ i baarakɛɲɔgɔn ka batakibɔlan kɔnɔ ni fanga ye hali a kalanna kɔfɛ. Google Workspace kɔnɔ, ɲɛmɔgɔ dɔ bɛ se ka cikan bɔ baarakɛɲɔgɔn ka inbox kɔnɔ ni Lakanali sɛgɛsɛgɛli baarakɛminɛn ye.

Mun na a sɔrɔbaga ye an ka sosiyete ka sara gundo bɛɛ ye k’a sɔrɔ ne ye sarako sɛbɛnw dogo ani ka raw data tab bɔ Excel kɔnɔ ka sɔrɔ ka ci?¶

Excel filew (`.xlsx`) ka kunnafoniw mara yɔrɔ fila la baarakɛlaw fanba tɛ minnu lajɛ abada. Fɔlɔ, n’i ye kulu walima baarakɛsɛbɛn dɔ digi kinin fɛ ani ka **Dogo** sugandi, o b’a dogo yecogo dɔrɔn de la; mɔgɔ o mɔgɔ bɛ baarakɛgafe sɔrɔ, o bɛ se ka **Unhide** digi segin fila kɔnɔ walasa ka seli dogolen bɛɛ lajɛ. Filanan, ni **PivotTable** bɛ i ka baarakɛ gafe kɔnɔ, Excel bɛ sɔrɔyɔrɔ kunnafonidilan bɛɛ lajɛlen ja dafalen mara XML kɔnɔna cakɛda kɔnɔ (`pivotCacheRecords1.xml`) hali n' i ye source worksheet tab fɔlɔ bɔ yen . Ni a sɔrɔbaga ye jatebla sumalen o nimɔrɔ digi siɲɛ fila i ka PivotTable kɔnɔ, Excel bɛ sɛbɛn kura dɔ Dabɔ min bɛ sɔrɔyɔrɔ jirisunw bɛɛ jira minnu bɔra o seli la. Tuma bɛɛ kopi kɛ ani ka **Paste Values (`Ctrl + Shift + V`)** don baarakɛgafe gansan kura kɔnɔ sanni ka bataki ci kɛnɛma.

Yala ne bɛna gɛn ka bɔ baara la ni ne y’a fɔ HR walima IT ye joona ko ne ye sarako walima kiliyan ka PII jatebɔsɛbɛn ci mɔgɔ jugu ma bala la wa?¶

Bi jɛkulu fanba la, n’i y’a yɛrɛ lakali ni fili dɔ kɛra min kɛra ka kɛɲɛ ni i yɛrɛ ye walima ni i ye i nɔrɔ ɲɔgɔn na, miniti 15 fo 60 fɔlɔ kɔnɔ, o bɛ jate hadamaden ka fili ye min jalaki tɛ. O ni fili in ta tɛ kelen ye, k’a ɲini ka fili dogo, ka bataki bɔ i ka Fɛn Cilenw na k’a sɔrɔ i ma o fɔ mɔgɔ si ye, walima k’a makɔnɔ fo kɛnɛma sɔrɔbaga ka ŋunan tile damadɔ kɔfɛ, a bɛ se ka fɔ ko tuma bɛɛ, o bɛ na ni baara dabila ye kun dɔ la bawo ka o bɔgɔbɔgɔ dogo, o bɛ sosiyete bɔ a ka sariya siratigɛ la GDPR / HIPAA nɔgɔyali finɛtiri la, sanga 72 kɔnɔ.

--- .

Sosow ani ɲɛmɔgɔyaso ka bilasiralikan¶

• Erɔpu kunnafonidilaw ka tɔnba (EDPB) & Angletɛri kunnafoniko ɲɛmɔgɔso (ICO): Ladilikan 9/2022 min bɛ mɔgɔ ka kunnafoniw tiɲɛni kunnafoni kan GDPR kɔnɔ (Sariyasen 33nan ni 34nan: Lɛrɛ 72 waati, Encryption Safe Harbor, ani Trusted Recipient Deletion Attestation Case misaliw).
• AN. Kɛnɛya ni hadamadenya baarada ka biro min ɲɛsinnen bɛ jamanadenw ka josariyaw ma (HHS OCR): HIPAA sariya tiɲɛni kunnafoni (45 CFR §§ 164.400-414), Four-Factor Breach Risk Assessment Guide, ani Ladilikan min bɛ kɛ ka kɛnɛya kunnafoniw lakananenw kɛ minnu tɛ se ka baara kɛ ni u ye, minnu tɛ se ka kalan, walima minnu tɛ se ka ɲɛfɔ mɔgɔ minnu ma yamaruya sɔrɔ (NIST SP 800-111 Encryption Safe Harbor).
• Jamana ka sariyaw ni seko ni dɔnko baarada (NIST, Etazuni): NIST SP 800-61 Rev. 2 Ɔridinatɛri lakanani ko kɛlenw ɲɛnabɔcogo gafe ani NIST SP 800-122 Gafe min bɛ mɔgɔ yɛrɛ ka kunnafoniw gundo lakana (PII).
• Microsoft Corporation: Cloud-Based Message Recall in Exchange Ɛntɛrinɛti Tekniki Architecture (techcommunity.microsoft.com) ani Microsoft Purview Data Loss Prevention (DLP), Sensitivity Labels, ani Sɛbɛnw Sɛgɛsɛgɛlikɛlaw ka sɛbɛnw.
• Amerika sariyatigiw ka tɔn (ABA) & U.S. Federal Rules of Evidence: ABA Formal Opinion 05-437 / 11-460 ani Federal Rule of Evidence 502(b) (Kunnafoni nafamaw jirali k’a sɔrɔ u ma laɲini ani Clawback kunnafoni teliya la).

Gafe minnu bɛ tali kɛ o ko la¶

• Zoom kasaara walima Teams screen-share leak, hot-mic incident, ani recording retraction
• Kasarako ɲɛnabɔli database jigin, git gundo bɔli, ani ko kɛlenw triage
• Kɔrɔtɔko yɔrɔjan baarakɛyɔrɔ lakanani ani kunnafoniw gundo
• Baarakɛ ordinatɛri sonyalen walima karilen taama senfɛ: MDM lock ani zero-downtime recovery
• Kɔrɔtɔko nimɔrɔw