E zigara onye ahụ na-ezighi ezi akwụkwọ ụgwọ ọnwa nzuzo ma ọ bụ faịlụ HIPAA na mberede: Cheta na mebie Triage¶

Ịkụkụ ** Zipụ *** na ozi-e nwere akwụkwọ ndekọ ego akwụghị ụgwọ ezoro ezo, onye ọrụ Social Security Numbers, ndị ahịa jikọrọ ọnụ ego, ma ọ bụ Ozi Ahụike echedoro (PHI), na ịghọta na sekọnd abụọ ka e mesịrị na Outlook ma ọ bụ Gmail mezuru onwe ya "David Miller (Onye na-ere Mpụga)" kama "David Miller (CFO n'ime ime)", na-akpalite usoro iwu ozugbo na nchekwa cyber. Ihe ị na-eme n'ime nkeji ise nke mbụ ** na-ekpebi ma ị nwere ike iji teknụzụ kewaa ohere ịnweta faịlụ ahụ tupu onye nnata ahụ emepe ya, yana ihe ị na-eme n'ime awa 24 ruo 72 nke mbụ ** na-ekpebi ma nzukọ gị na-eche ihe ndekọ ihe omume na-emezigharị onwe ya ma ọ bụ ntaramahụhụ siri ike n'okpuru GDPR Nkeji edemede 33 (72-hour fee), iwu ikike. Iwu Ikwado Mmebi HIPAA (45 CFR 164.400-414*, ma ọ bụ iwu imebi data steeti.

Ọ bụrụ na ozi-e a na-eduhie eduhie gụnyere ntuziaka ịnyefe waya ego, ịpụnara mmadụ, ma ọ bụ igbe mbata ụlọ ọrụ mebiri emebi, kpọọ ndị mmanye iwu mpaghara ma ọ bụ ahịrị mkpesa cybercrime (ma ọ bụ akara mberede mpaghara gị, 911 na United States na Canada, 112 gafee European Union, 999 na United Kingdom, ma ọ bụrụ na enwere nchekwa anụ ahụ egwu; lee nọmba mberede). Ngwa ngwa gafere ntụaka aka nwanne anyị na-eduzi na Mbugharị na mberede ma ọ bụ otu ndị otu ihuenyo-oke ntapu na ịdekọ iweghachi azụ, nchekwa data mmepụta ihe mberede na-adaba, ntapu nzuzo git, na nhazi ihe merenụ, na Nchekwa ime ọrụ mberede na nzuzo data ka ị na-eme usoro njide dị n'okpuru.

Mee nke a ugbu a¶

1. ** Ọ bụrụ na ezigara faịlụ a ka ọ bụrụ njikọ Cloud (OneDrive, SharePoint, Google Drive, Dropbox, Box), kagbuo ikike na njikọ ahụ mbụ (0 to 30 seconds) tupu ị na-agbalị icheta email ahụ.** Ọ bụrụgodị na email ahụ adịlarị n'ime igbe mbata nke onye na-enweta na mpụga ebe ncheta email agaghị ekwe omume, na-agbanwe nhazi nkesa faịlụ igwe ojii ka ọ bụrụ "Ndị akọwapụtara (Wepụ onye nnata)" ma ọ bụ "amachibidoro" severs banye 1 second yabụ ịpị njikọ ahụ na-eweghachi ihuenyo "Ajụjụ ohere ịnweta".
2. ** Ọ bụrụ na ị ka nọ n'ime mpio "Wepụ Send" nkeji 5 ruo 30 na Gmail ma ọ bụ Outlook na Weebụ, pịa Undo na ala nke ihuenyo gị ozugbo.** Ozugbo "Undo" ọkọlọtọ toast na-apụ n'anya, Protocol Nyefe Ozi Dị Mfe (SMTP) ihe nkesa ezipụla ozi n'ime igbe ozi gị.
3. ** Ọ bụrụ na ị na-eji Microsoft 365 / Exchange Online wee zigara onye ọrụ ibe gị ozi-e ININIDE otu ụlọ ọrụ gị (same Exchange tenant), mkpali Recall This Message ozugbo, ma ezipụla ozi na-esochi na-ekwu "Biko emeghela email m gara aga" mbụ.** Izipu ozi-e nke abụọ dị egwu nke nwere isiokwu "ỌRỤGHỊ: Emepela EMAIL gara aga" kpasuru ọchịchọ ịmata ihe ma mee ka onye nnata ahụ buru ụzọ pịa email mbụ ahụ. Na ncheta ozi igwe ojii Microsoft 365 ọgbara ọhụrụ, Exchange na-ehichapụ ozi a na-agụghị n'ime igbe mbata nke onye ọrụ ọ bụrụgodị na ha hụrụ ọkọlọtọ ngosi desktọpụ, ma ọ bụrụhaala na ha emepebeghị ahụ ozi.
4. ** Ghọta Outlook ahụ Recall This Message Ọ DỊGHỊ ịrụ ọrụ maka ndị nnata mpụga (@gmail.com, @yahoo.com, ma ọ bụ ụlọ ọrụ ọzọ @client.com ngalaba)** Ozugbo email gafere oke SMTP ụlọ ọrụ gị na sava ozi mpụga, ihe nkesa mgbanwe gị enweghị ikike ịbanye n'ime ihe nkesa ụlọ ọrụ ọzọ wee hichapụ mgbakwunye ọnụọgụ abụọ..xlsx, .pdf, .csv). Ịpị Recall na email mpụga naanị na-ezigara onye mbịara email nke abụọ na-eme ihere na-ekwu "[Onye na-ezipụ] ga-achọ icheta ozi ahụ...", na-agwa ha ka ha lelee ozi-e mbụ gị.
5. ** Lelee ma akwụkwọ akụkọ agbakwunyere ọ nwere taabụ zoro ezo, kọlụm zoro ezo, ma ọ bụ cache PivotTable (xl/pivotCache/pivotCacheRecords1.xml.** Ọtụtụ ụgwọ ọrụ na M&A leaks na-eme mgbe onye nyocha zoro kọlụm "Executive Salary & SSNs" kọlụm ma ọ bụ hichapụ taabụ isi mmalite, wee zipụ ozi-e .xlsx akwụkwọ ọrụ na-eche naanị chaatị nchịkọta a na-ahụ anya. A .xlsx faịlụ bụ ebe nchekwa ZIP nke na-ejigide ahịrị isi mmalite ehichapụ n'ime oghere XML PivotTable dị n'ime ya ruo mgbe ehichapụrụ.
6. ** Gwa onye ọrụ nchekwa data nke ime gị (DPO), Onye isi nchekwa ozi (CISO), Onye na-ahụ maka nzuzo, ma ọ bụ ndị otu nrubeisi nke iwu/HR n'ime awa 1 ruo 2 mbụ.** Agbalịla ịzobe PII, ụgwọ ọrụ, ma ọ bụ ntapu HIPAA ma ọ bụ kpakọrịta na nzuzo na onye nnata mpụga na-enweghị nlekọta iwu. N'okpuru ** GDPR Nkeji edemede 33 **, elekere ** awa 72 siri ike iji mee ka ndị ikike nchekwa data mara na-amalite ịbanye n'oge * onye ọrụ ọ bụla mara banyere mmebi ahụ, yabụ izobe mmejọ ahụ ụbọchị atọ na-ere windo mkpesa iwu nke ụlọ ọrụ wee tụgharịa mmejọ n'eziokwu ka ọ bụrụ mmebi iwu ga-akwụsị.

Osisi mkpebi: njide email nzuzo na-eduhie eduhie yana nhazi usoro¶

Soro osisi njide usoro-nzọụkwụ a dabere na otu esi etinye faịlụ ahụ yana ma onye nnata na-ezighi ezi ọ nọ n'ime ma ọ bụ na mpụga nzukọ gị.

flowchart TD
    A["Nkwụghachi ụgwọ nzuzo, PII onye ahịa, ma ọ bụ faịlụ HIPAA ezigara onye ezighi ezi"] --> B{"Ekekọrịtara faịlụ ahụ site na njikọ Cloud (OneDrive / SharePoint / Google Drive / Igbe) ma ọ bụ dị ka mgbakwunye faịlụ Raw (.xlsx / .pdf / .csv)?"}
    B -->|"Njikọ igwe ojii (OneDrive / SharePoint / Google Drive)"| C["Ngwa ngwa mepee ntọala nkesa faịlụ -> Hichapụ njikọ / Wepu onye ọrụ mpụga -> Lelee Audit Log ka ịhụ ma elele/ebudata faịlụ."]
    C --> D{"Audit Log gosiri 0 nlele/nbudata tupu i gbuo njikọ ahụ?"}
    D -->|"EE: 0 Echiche / 0 nbudata"| E["Akwụpụrụ: Ndekọ nyocha nseta ihuenyo na-egosi ohere efu tupu iwepụ njikọ -> Jiri nchekwa/DPO banye nso-efu."]
    D -->|"Mba: Nnata emeghelarị ma ọ bụ ebudatara faịlụ"| F["Gaa n'ihu na njide nkịtị & Mbilite n'iwu/DPO"]
    B -->|"Mgbakwunye faịlụ Raw (.xlsx / .pdf / .docx) ma ọ bụ Ederede ahụ nwere mmetụta"| G{"Ọ bụ onye nnata na-ezighi ezi INTERNAL (otu ụlọ ọrụ / onye na-agbanwe agbanwe) ma ọ bụ Mpụga (Ụlọ ọrụ ọzọ / Email nkeonwe)?"}
    G -->|"Ndị otu INTERNAL (Otu M365 / Google Workspace Org)"| H["1. Gbaa Outlook Cloud Message Recall (Hichapụ akwụkwọ ndị a na-agụghị) na/ma ọ bụ kpọọ Admin ozugbo ka ọ rụọ ọrụ nchọta ọdịnaya nke Exchange Admin Center / Google Workspace Investigation Tool Hichapụ"]
    G -->|"Onye nnata Mpụga (Onye ahịa, onye na-ere ahịa, ma ọ bụ onye ọbịa)"| I["AKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWASỊ'Ọ bụrụ na faịlụ nwere Azure RMS / Purview Sensitivity Encryption, kagbuo ikike ozugbo."]
    H --> F
    I --> F
    F --> J["Kpesa ozi n'ime awa 1 na DPO / onye na-ahụ maka nzuzo / CISO / HR nwere ozi-ID ziri ezi, akara oge, onye nnata na ebe data ekpughere."]
    J --> K["Site na nkwado iwu/DPO: onye nnata oku site na ekwentị + zipu arịrịọ nkịtị maka nhichapụ na-adịgide adịgide & Asambodo mbibi mbinye aka"]

Part 1: First-60-nke abụọ teknuzu retraction (Gịnị n'ezie na-arụ ọrụ vs. ihe na-ada)¶

Mgbe ị na-aghọta a nzuzo email dị nnọọ gara na-ezighị ezi adreesị, ọ bụla nke abụọ ọnụ n'ihi na 50 percent A na-emepe ozi ịntanetị ụlọ ọrụ n'ime nkeji 3 mbụ nke mbata. Mezue ngwa nkwụghachi azụ nke teknụzụ dabara na ikpo okwu email gị yana ụdị mgbakwunye:

1. Ọnọdụ A: Faịlụ a bụ SharePoint, OneDrive, Google Drive, ma ọ bụ Dropbox njikọ (100% Killable)¶

Ọ bụrụ na nzukọ gị na-ejikọta faịlụ dị ka njikọ igwe ojii (ma ọ bụ ọ bụrụ na ị debere njikọ), ị na-ejide ihe ngbanwe nke egbu egbu ọbụlagodi mgbe ezipụchara ma mepee email: - Microsoft OneDrive/SharePoint Online: 1. Mepee OneDrive ma ọ bụ SharePoint, pịa faịlụ a aka nri, wee họrọ Jikwaa Access. 2. N'okpuru njikọ, pịa ** Mkpọfu ahịhịa (Hichapụ njikọ)** akara n'akụkụ njikọ nkekọrịta, yana n'okpuru ** Nweta ozugbo , pịa aha nnata wee gbanwee ikike na ** Wepu ohere ozugbo . 3. Pịa ** Ellipsis (...) -> nkọwa -> Ọrụ (ma ọ bụ nweta Microsoft 365 Admin gị lelee Microsoft Purview Audit Log maka FileAccessed / FileDownloaded ihe omume) iji gosi n'ụzọ iwu kwadoro ma onye nnata ahụ emetụla njikọ ahụ tupu ị gbuo ya. - Google mbanye / Google Docs / Akwụkwọ Google: 1. Pịa aka nri faịlụ na Google Drive -> ** Kekọrịta . 2. Gbanwee ** ohere izugbe ** site na * "Onye ọ bụla nwere njikọ" na ** Amachibidoro, wee wepụ adreesị ozi-e onye nnata na-ezighi ezi na Ndị nwere ohere. 3. Ọ bụrụ na onye nnata nwere ugbu a Google Sheet mepere na ihuenyo ha ugbu a, pịa ** Ntọala (Gear Icon) n'ime Modal Share wee wepụ ya "Ndị na-ekiri na ndị na-ekwu okwu nwere ike ịhụ nhọrọ ibudata, bipụta na detuo" tupu ịchụpụ ha. 4. Lelee ** Lelee -> dashboard mmemme -> Ndị niile na-ekiri* n'ime Google Doc/Ibé akwụkwọ ka ịhụ kpọmkwem stampụ nkeji nkeji na nkeji nke onye lere akwụkwọ ahụ.

2. Ọnọdụ B: Microsoft Outlook / Exchange Online Recall This Message (Nke ime vs. Mpụga Matrix)¶

Ọtụtụ ndị ọrụ na-efunahụ nkeji dị oke ọnụ ahịa na ịpị bọtịnụ Outlook **Cheta Ozi a n'amaghị mgbe mgbanwe nwere ike weghachi ozi-e azụ:

Otu esi akpalite ncheta ozi Outlook nke ọma (maka mmejọ nke otu onye nwe ụlọ naanị)¶

1. Na Outlook (Desktọpụ, Ọhụụ Ọhụrụ, ma ọ bụ Outlook na Weebụ), pịa nchekwa ** ezitere ihe ** n'akụkụ aka ekpe.
2. ** Pịa ugboro abụọ *** ozi-e na-eduhie eduhie ka o meghere na mpio mmapụta nke ya dị iche iche (A na-ezobe ncheta na pane ọgụgụ nke Classic Outlook).
3. N'elu rịbọn dị n'elu, gaa na ** Ozi -> Omume -> Cheta ozi a ** (ma ọ bụ na Outlook / Weebụ Ọhụrụ, pịa akara ngosi Cheta ozi n'elu ozi ezigara).
4. Họrọ "Hichapụ akwụkwọ ozi a na-agụghị akwụkwọ" wee lelee "Gwa m ma ọ bụrụ na ncheta ga-aga nke ọma ma ọ bụ daa maka onye nnata ọ bụla" wee pịa OK.

Nkebi 2: Ntụle mmebi iwu (Kedu ihe dị n'ime faịlụ ahụ?)¶

Tupu ị kọọrọ onye na-ahụ maka nchekwa data gị ihe merenụ (DPO), Ngalaba iwu, ma ọ bụ onye njikwa, were ** 3 nkeji *** mepee faịlụ ezitere na nchekwa gị ** ihe ezigara ma nyochaa ọdịnaya ya.

1. 4 "Ọnyà data zoro ezo" n'ime Excel (.xlsx) na PDF faịlụ¶

Ọ bụrụ na izitere akwụkwọ ọrụ Excel ma ọ bụ PDF na-eche na ị wepụrụ kọlụm ndị nwere mmetụta na mbụ, lelee ọkwa anọ zoro ezo ozugbo: - ** Ọnyà 1: Ahịrị ezoro ezo, kọlụm ezoro ezo, na akwụkwọ ọrụ ezoro ezo / "Ezoro ezoro ezo:** Onye ọ bụla natara akwụkwọ ozi .xlsx faịlụ nwere ike pịa ** Unhide Columns / Unhide Worksheets ** (ma ọ bụ mepee VBA Editor) Alt + F11 ịgbanwe xlSheetVeryHidden ka xlSheetVisible) na 5 sekọnd. - ** Ọnyà 2: Ọnyà Cache PivotTable Excel (pivotCacheRecords1.xml):** - Ka e were ya na ị wuru nchịkọta PivotTable site na tebụl nna ukwu HR dị 10,000 nwere aha ndị ọrụ, adreesị ụlọ, ụgwọ ọnwa, na SSN, wee ** ehichapụ taabụ HR Master Master 10,000-ahịrị ***, chekwaa ya. .xlsx na-eji naanị nchịkọta PivotTable taabụ, wee ziga ya email na onye na-ere ahịa. - Na ndabara, Excel na-echekwa ** nnomi zuru ezu nke ahịrị isi iyi 10,000 ehichapụrụ ** n'ime ebe nchekwa PivotCache nke akwụkwọ ọrụ (Save source data with file). Onye ọ bụla nke pịa cell nọmba ọ bụla ugboro abụọ n'ime PivotTable gị na-akpalite atụmatụ Excel's ** Show Details (Drill-Down) , nke na-eweghachite tebụl nna ukwu HR ehichapụrụ na ụgwọ ọnwa onye ọrụ ọ bụla na SSN na mpempe akwụkwọ ọhụrụ. - Ọnyà 3: Akụkọ Ụdị Akwụkwọ & Mgbanwe Esoro.docx / Cloud Docs): Ọ bụrụ na ahapụre * Mgbanwe Track ** n-enweghị ịpị abata banwe niile ma ọ bụ ọ bụrụ na ị na-ekekọrịta akwụkwọ ojii na ohere Editor (nke na-enye ohere ikiri ** Akụkọ ụdị **), ye nnata nwere ike gụọ ndezi ehichapụ ọ bụla. - ** Ọnyà 4: Mgbanwe PDF "Black Highlighter" na-ezighi ezi: Idepụta udi rectangle ojii ma ọ bụ ihe ngosi ojii n'elu SSN ma ọ bụ akara akaụntụ ụlọ akụ n'ime Okwu/nhụchalụ na ichekwa dị ka PDF anaghị ehichapụ ederede dị n'okpuru; onye nnata nwere ike ime ka igbe ojii pụta ìhè, pịa Ctrl + C, ma mado ederede doro anya SSN na Notepad.

2. Ịkọwa oke usoro iwu nke data ewepụrụ¶

Nkebi 3: Otu esi kọọ akụkọ n'ime wee kpọtụrụ onye nnata na-ezighi ezi (debiri okwu maka okwu)¶

Ozugbo ị nwara ikewapụ ohere ọrụ aka wee chọpụta ihe data dị n'ime faịlụ ahụ, soro usoro nrịbawanye nzọụkwụ abụọ a:

Kwụpụ 1: Mwelite n'ime ngwa ngwa gaa na DPO / onye ọrụ nzuzo / CISO / njikwa (n'ime nkeji 15 ruo 60)¶

Kpọtụrụ ụlọ ọrụ gị ** nzaghachi ihe mberede nchekwa (security@ / privacy@ / dpo@*** ọwa na onye njikwa gị ozugbo na ** eziokwu ise ndị a : 1. ** Kpọmkwem stampụ oge & Mpaghara oge: *** "Ezitere taa na 14:12 UTC." 2. ** Ezigbo ezigara na adreesị ozi-e onye nnata na-ezighi ezi (na ndị ha bụ): *** E zigara ya dmiller@vendor-corp.com (onye na-ere ahịa dị ugbu a n'okpuru NDA) kama dmiller@ourcompany.com" * (N'okpuru HIPAA na GDPR 4-ihe ize ndụ ntụle ihe ize ndụ, na mberede na-ezigara ụlọ ọrụ HIPAA ọzọ kpuchiri ekpuchi, ụlọ akụ ma ọ bụ onye na-ere ahịa n'okpuru NDA na-ebu akara ihe ize ndụ dị ala karịa iziga ozi na-amaghị. @gmail.com adreesị.)* 3. ** Ụdị Mgbakwunye & Ọnọdụ ezoro ezo:** "Agbakwunyere dị ka raw .xlsx faịlụ, enweghị paswọọdụ" MA ọ bụ " Kekọrịtara dị ka njikọ SharePoint; wepụrụ na 14:14 UTC nwere echiche 0 na ndekọ nyocha." 4. ** Ngwakọta data ziri ezi & Ọnụọgụgụ n'ime: *** * "Faịlụ nwere ahịrị 42 nke ego ego Q3 na NJ onye ọrụ; ZERO Social Security Numbers, ZERO bank number, and ZERO addresses."* 5. ** Omume emere ruo ugbu a: *** * "njikọ SharePoint ewepụrụ; na-eche ntinye aka gị na arịrịọ Asambodo mbibi."*

Kwụpụ 2: Kpọọ onye nnata wee nweta “Asambodo mbibi / akaebe nke nhichapụ” bịanyere aka na ya.¶

N'okpuru ** U.S. Ụlọ ọrụ HHS maka ikike obodo (OCRHIPAA 4-Factor Risk Assessment (45 CFR 164.402*** na ** European Data Protection Board (EDPBNtuziaka 9/2022 ***, ma ọ bụrụ na onye nnata na-atụghị anya ya (karịsịa ọkachamara ụlọ ọrụ tụkwasịrị obi, onye ọka iwu, onye na-edekọ ego, ma ọ bụ ụlọ ọrụ ahụike) ** na-akwado ngwa ngwa na ederede na ha ebudataghị / zipu faịlụ ahụ wee kpochapụ email ahụ kpamkpam na igbe mbata ha na ihe ehichapụrụ / ihe mkpofu , ndị na-achịkwa na-ekwe ka ụlọ ọrụ ahụ kwadoro ugboro ugboro. ikpughe.

Site na nkwado onye ọrụ iwu/Nzuzo gị, ** kpọọ onye nnata na-atụghị anya ya na ekwentị mbụ**, wee soro usoro iwu a ozugbo Nkpughe na-enweghị isi na ozi nnabata nhichapụ (wepu ihe mgbakwunye mbụ tupu izipu):

Subject: URGENT: Inadvertent Confidential Email Notice & Request for Deletion (Sent [Date] at [Time])

Dear [Recipient Name],

Earlier today at [Time], an email with the subject line "[Exact Subject Line of Misdirected Email]" was inadvertently sent to your email address due to an address auto-complete error.

That message and its attachment contain confidential and legally protected information intended solely for an internal recipient. If you have not yet opened the message or attachment, we kindly ask that you do NOT open, download, copy, or forward it.

To help us satisfy our regulatory compliance and audit obligations, please complete these two quick steps right now:

1. Permanently delete the original email (and any downloaded copy of the attachment) from your Inbox, Downloads folder, and your "Deleted Items / Trash" folder (in Outlook on Windows, you can select the email and press Shift + Delete).
2. Reply directly to this email with the following one-sentence confirmation for our compliance log:

   "I confirm that I have permanently deleted the email sent on [Date] with the subject '[Original Subject]' and any attachments from my inbox, local storage, and trash/deleted items without retaining, copying, or forwarding any copy of the contents."

Thank you sincerely for your integrity and immediate assistance in resolving this error.

Best regards,
[Your Name / Title / Privacy Officer Contact]

Part 4: adịgide adịgide oru guardrails otú ị mgbe email na-ezighị ezi onye ma ọ bụ zoro data ọzọ¶

Ozugbo nkewa ahụ mechara, were nkeji 10 ** gbanye nchekwa ise ndị a arụnyere na Microsoft Outlook, Gmail na Excel ka mmejọ zuru oke ma ọ bụ oghere PivotTable zoro ezo enweghị ike ibute mmebi ọzọ:

• 1. Hichapụ ndenye zuru oke nsi (Nickname Cache) Ngwa ngwa:
  • Na Outlook ma ọ bụ Gmail, malite pịnye aha onye mpụga ahụ n'ime To: igbe ruo mgbe ntụnye ndọpụta pụtara, wee pịa X (Hichapụ) akara dị n'akụkụ aka nri nke aha ha na listi ndọpụta ka imezu onwe ya agaghị egosi ha na mberede ọzọ.
• 2. Gbanwuo Kachasị "Kwegharịa izipu / igbu oge" (30 Seconds na Gmail, 2 Minutes na Outlook):
  • Gmail: Gaa na Ntọala (Gear) -> Hụ ntọala niile -> Ozuruọnụ -> Wepu izipu wee gbanwee oge kagbuo site na 5 seconds ruo kacha 30 seconds .
  • Outlook Desktop (Classic): Gaa na ** Iwu -> Jikwaa Iwu & Ntị -> Iwu ọhụrụ -> Tinye iwu na ozi m na-eziga -> Wepu nnyefe site na 2 nkeji *** (ma ewezuga ma ọ bụrụ na isiokwu ahụ nwere "#now"). Ihe nchekwa igbe dị nkeji 2 na-ejide 95 percent nke mgbakwunye na mmejọ ndị nnata tupu email ahụ ahapụ kọmputa gị.
• 3. Kwado ọkọlọtọ ịdọ aka ná ntị nke ndị nnata nke mpụga (MailTips na Exchange / Mpụga Label na Gmail):
  • Microsoft 365 ọgbara ọhụrụ na Google Workspace na-egosipụta ibe email mpụga na edo edo/oroma wee gosipụta ọkọlọtọ ọgụgụ "Onye nnata na-esote nọ na mpụga nzukọ gị" tupu ị kụrụ Send. Elegharala mgbawa nnata edo edo/oroma anya mgbe ị na-etinye akwụkwọ mpịakọta dị n'ime.
• **4. Gbaa arụ ọrụ Excel arụnyere Document Inspector (File -> Info -> Check for Issues -> Inspect Document) Tupu Email ọ bụla na mpụga: ***
  • Tupu itinye ihe ọ bụla .xlsx ma ọ bụ .docx faịlụ na email, mee ** Nyochaa akwụkwọ . Ọ na-egosipụta ọkọlọtọ na-akpaghị aka ** Ahịrị na kọlụm zoro ezo, akwụkwọ ọrụ zoro ezo, ọdịnaya a na-adịghị ahụ anya, Njirimara / ndị ode akwụkwọ, yana data PivotTable nke echekwara, wee nye gị otu pịa ** Wepụ ihe niile ***.
  • Mgbe ị na-eziga tebụl nchịkọta na mpụga, ** detuo mkpụrụ ndụ ma jiri ya Paste Special -> Values (V) n'ime akwụkwọ ọrụ oghere ọhụrụ** (ma ọ bụ bupụ naanị mpempe akwụkwọ na-arụ ọrụ na .pdf) yabụ usoro efu, taabụ zoro ezo, ma ọ bụ PivotCaches na-eji faịlụ ahụ eme njem.
• 5. Okwuntughe-Chekwaa faịlụ ndị nwere mmetụta na-apụ apụ (ma ọ bụ jiri akara mmetụta uche):
  • Mgbe ọ bụla ị ga-ezipụ ụgwọ ịkwụ ụgwọ, akwụkwọ ụtụ isi, ma ọ bụ PII dị ka mgbakwunye, zoo faịlụ Excel/PDF na paswọọdụ ** AES-256 siri ike (File -> Info -> Protect Workbook -> Encrypt with Password** ma ziga onye nnata okwuntughe ahụ na ọwa dị iche iche ** (dị ka ozi ederede SMS, Signal, Slack, ma ọ bụ oku ekwentị, ọ dịghị n'ime otu eri email). Ọbụna ma ọ bụrụ na ị na-ezigara ndị ezoro ezo .xlsx faịlụ na David Miller na-ezighi ezi, na-enweghị paswọọdụ SMS nke gara n'aka ekwentị David Miller, faịlụ ahụ bụ brik na-enweghị ike ịgụta ya (0% Mmebi data a na-akọ n'okpuru HIPAA na GDPR nchekwa-ọdụ ụgbọ mmiri ewepụrụ).

Nọmba mberede mpaghara na ụkpụrụ ụlọ ọrụ¶

Ọ bụ ezie na ntanye email nzuzo na mberede bụ usoro iwu na ihe gbasara cybersecurity kama ịbụ ihe mberede anụ ahụ 911 (ọ gwụla ma ọ bụ ihe iyi egwu anụ ahụ ozugbo ma ọ bụ ịpụnaara mmadụ, nke a na-akpọ 911 na US/Canada, 999 na UK, 112 na EU, ma ọ bụ 000 na Australia), ụlọ ọrụ ga-agbasorịrị iwu ndị a na-echekwa nche na data iwu: na-enye ndị ọrụ ikike.

United States na Canada¶

• ** U.S. Mmebi nlekọta ahụike HIPAA (Protected Health Information): *** Ndị U.S. na-achịkwa ya. Ngalaba Ahụike na Ọfịs Ọrụ Ndị mmadụ maka ikike obodo (HHS OCR* site na OCR Breach Portal (ocrportal.hhs.gov). Mmebi na-emetụta 500 or more A ga-akọrịrị ndị mmadụ n'otu n'otu na HHS OCR n'egbughị oge na-enweghị ezi uche na n'ime ** ụbọchị kalenda 60 ** nke nchọpụta; mmebi na-emetụta fewer than 500 Ndị mmadụ n'otu n'otu ga-abanyerịrị wee kọwapụta n'ime ụbọchị 60 ka njedebe nke afọ kalenda gasịrị.
• ** U.S. Mmebi iwu gbasara ego, ụtụ isi na steeti PII:** Ndị ọkachamara n'ụtụ isi na ndị were n'ọrụ na-ezu ohi data W-2/ụgwọ ga-akọrịrị na ** IRS Stakeholder Liaison** na FBI IC3 (ic3.gov). Ụlọ ọrụ ego na-abụghị nke ụlọ akụ n'okpuru **FTC Iwu Nchekwa *** ga-emerịrị FTC n'ime ụbọchị 30 ** ma ịnweta enweghị ikike nke data ezoro ezo na-emetụta. 500+ ndị na-azụ ahịa. Steeti 50 niile US na-amanye windo ngosi mmebi iwu (na-abụkarị 30 ruo ụbọchị 45).
• ** Canada (PIPEDA & Iwu nzuzo nke mpaghara):** Kpesa mmebi iwu na-ebute "ezigbo ihe egwu nke nnukwu mmerụ ahụ (RROSH)" nye ** Office nke Kọmishọna Nzuzo nke Canada (OPC, priv.gc.ca)** ozugbo enwere ike, yana ndị kọmishọna mpaghara (** CAI* na Quebec n'okpuru Iwu 25, ** IPC *** na Ontario maka PHIPA).

United Kingdom¶

• ** Ụlọ ọrụ Kọmishọna Ozi UKICO*** N'okpuru ** UK GDPR Nkeji edemede 33**, ndị na-ahụ maka njikwa ga-akọrịrị mmebi data nkeonwe na ICO (ico.org.uk/for-organisations/report-a-breach/ ma ọ bụ 0303 123 1113* n'ime ** awa 72 nke ịmara ya, ọ gwụla ma mmebi ahụ agaghị ebute ihe egwu na ikike na nnwere onwe nke ndị mmadụ n'otu n'otu.

European Union¶

• ** GDPR Nkeji edemede 33 & Nkeji edemede 34 (All 27 EU Member States):** Amanyere iwu ** elekere ngosi elekere 72** na ndị isi nchekwa nchekwa data mba (CNIL na France, ** BfDI* na Germany, ** AEPD** na Spain, ** DPC** na Ireland, Garante* na Italy, ** AP *** na Italy, ** AP *** na Italy. 9/2022 ***.

Australia na New Zealand¶

• ** Australia (Notifiable Data Breaches / NDB Scheme):** Ndị Office of the Australian Information Commissioner na-achịkwa (()OAIC, oaic.gov.au). Ndị otu nwere ihe ruru ụbọchị 30 ** iji chọpụta ma mmebi data tozuru etozu nwere ike bute * nnukwu mmerụ ahụ* (yana ma ọ bụrụ na emezigharị ya, dị ka ihichapụ ngwa ngwa tupu iji ya eme ihe n'ụzọ na-ezighị ezi, gbochiri nnukwu mmerụ ahụ).
• ** New ZealandPrivacy Act 2020): *** Gwa ndị ** Office nke Kọmishọna Nzuzo (OPC, privacy.org.nz*** site na * NotifyUs * n'ime awa 72 ** nke ịchọpụta mmebi nzuzo nke ama ama.

India na Asia-Pacific¶

• India (CERT-In & DPDP Act: Kwuo ihe gbasara cybersecurity akọwapụtara na mwepu data na ** CERT-In (incident@cert-in.org.in*** n'ime awa 6 ** ma gwa ** Data Protection Board of India *** n'okpuru Iwu DPDP.
• ** (Singapore)PDPA& Japan (APPI):** Na Singapore, gwa PDPC n'ime ** ụbọchị kalenda 3 (awa 72). Na Japan, nyefee akụkọ mbido na ** Nchedo Ozi Onwe Onye (Personal Information Commission).PPC* n'ime ** 3 ruo 5 ụbọchị ***.

Ajụjụ a na-ajụkarị¶

Ịpị "Cheta Ozi a" na Microsoft Outlook ọ na-ehichapụ ozi-e ezigara na adreesị Gmail ma ọ bụ ihe nkesa email nke ụlọ ọrụ ọzọ?¶

Mba, ọ dịghị mgbe. Njirimara "Cheta Ozi a" nke Outlook na-adabere na iwu igbe ozi ime Microsoft Exchange nke na-arụ ọrụ naanị mgbe ma onye zitere ya na onye nnata bi n'ime otu Microsoft 365 / Exchange nzukọ. Ọ bụrụ na izipu ozi-e na mpụga `@gmail.com` adreesị ma ọ bụ onye ahịa `@othercompany.com` adreesị wee pịa Cheta, ihe nkesa ozi mpụga na-eleghara ntuziaka ihichapụ wee wepụta ọkwa ederede nke abụọ na-ekwupụta "[Aha gị] ga-achọ icheta ozi '[ Isiokwu]'." Ọkwa nke abụọ ahụ na-egosipụta mmejọ gị ma kwenye na onye mpụga ahụ ga-emepe ozi-e nke mbụ ozugbo.

Ọ bụrụ na ejiri m paswọọdụ siri ike ezoro m faịlụ Excel ma ọ bụ PDF tupu izipu ya na mberede email na onye na-ezighi ezi (ma etinyeghị paswọọdụ na email), ọ ka bụ mmebi data HIPAA ma ọ bụ GDPR?¶

Mba. Ma Iwu Ịmakwa Mmebi HIPAA US (`45 CFR 164.402`) na EU/UK GDPR Nkeji edemede 34 (EDPB Ntuziaka 9/2022) na-enye nkọwa doro anya ** Ebe Nchekwa ezoro ezo **. Ọ bụrụ na ezoro ezoro ezoro ezoro ezoro ezoro ezo nke ọkọlọtọ ụlọ ọrụ (dị ka AES-128 ma ọ bụ AES-256 site na Excel ọgbara ọhụrụ). `.xlsx` nchedo okwuntughe, 7-Zip AES-256, ma ọ bụ Microsoft Purview Sensitivity Labels) na ebunyeghị paswọọdụ n'aka onye nnata na-ezighi ezi, data nzuzo ahụ ka na-anọgide na-enweghị ike ịgụta ya. Jiri ndị otu nchekwa gị banye n'ime ihe dị nso na-efunahụ gị, mana ọ naghị abụ mmebi nke data nkeonwe na-enweghị nchekwa.

Ngalaba IT ụlọ ọrụ m nwere ike ihichapụ ozi-e m zigara onye ọrụ ibe m na mberede ma ọ bụrụ na onye ọrụ ibe emepelarị ya?¶

Ee. Ọ bụrụ na bọtịnụ "Cheta Ozi a" Outlook nke gị ga-ada ma ọ bụrụ na onye ọrụ gị n'ime abanyelarị na email ahụ wee kaa ya akara dị ka Gụọ, Microsoft 365 Exchange Administrator ma ọ bụ Google Workspace Super Admin ebulila ikike nrube isi. Na Microsoft 365, onye nchịkwa nwere ike iji Defender maka Office 365 Threat Explorer ma ọ bụ mee mgbanwe n'ịntanetị PowerShell `New-ComplianceSearchAction -Purge -PurgeType HardDelete` iwu ka iwepu ozi-e nke ọma n'igbe ozi onye ọrụ gị ọbụlagodi na agụchara ya. Na Google Workspace, onye nchịkwa nwere ike ihichapụ ozi na igbe mbata nke onye ọrụ na-eji Ngwá Ọrụ Nchọpụta Nchekwa.

Kedu ihe kpatara onye nnata ahụ ji hụ ụgwọ ọnwa nzuzo nke ụlọ ọrụ anyị mgbe m zoro kọlụm ụgwọ ọnwa wee hichapụ taabụ data raw na Excel tupu izipu?¶

Ụdị faịlụ Excel (`.xlsx`) chekwaa data n'ebe abụọ ọtụtụ ndị ọrụ anaghị enyocha ya. Nke mbụ, ịpị aka nri kọlụm ma ọ bụ mpempe akwụkwọ ọrụ wee họrọ ** Zoo ** naanị na-ezobe ya na anya; Onye ọ bụla na-anata akwụkwọ ọrụ nwere ike pịa ** Unhide ** n'ime sekọnd abụọ ka ịlele cell ọ bụla zoro ezo. Nke abụọ, ọ bụrụ na akwụkwọ ọrụ gị nwere ** PivotTable ***, Excel na-echekwa foto zuru oke nke ihe ndekọ data niile dị n'ime oghere XML dị n'ime.`pivotCacheRecords1.xml`) ọbụlagodi mgbe ihichapụ taabụ akwụkwọ ọrụ isi mmalite mbụ. Mgbe onye nnata ahụ pịa nọmba nchịkọta abụọ ọ bụla n'ime PivotTable gị, Excel na-emepụta mpempe akwụkwọ ọhụrụ na-egosipụta ahịrị isi mmalite niile ehichapụrụ na-enye cell ahụ nri. Detuo mgbe niile na ** Tapawa ụkpụrụ (`Ctrl + Shift + V`*** banye n'akwụkwọ arụrụ arụ ọrụ ọhụrụ tupu izipu ozi na mpụga.

A ga-achụ m n'ọrụ ma ọ bụrụ na m kọọrọ HR ma ọ bụ IT ozugbo na ezigara m onye na-ezighi ezi akwụkwọ akwụ ụgwọ ma ọ bụ akwụkwọ mgbasa ozi PII ahịa na mberede?¶

N'ọtụtụ n'ime ụlọ ọrụ ọgbara ọhụrụ, a na-ewere ịkọ akụkọ onwe onye zuru oke na mberede ma ọ bụ mmejọ ntinye n'ime nkeji 15 ruo 60 mbụ dị ka njehie mmadụ na-enweghị ntụpọ. N'ụzọ dị iche, ịnwa izochi mmejọ ahụ, ihichapụ ozi-e site na ihe ezigara gị na-agwaghị onye ọ bụla, ma ọ bụ chere ruo mgbe onye na-anabata ya na-eme mkpesa ụbọchị ole na ole ka e mesịrị, ọ fọrọ nke nta ka ọ bụrụ mgbe niile na-akwụsị n'ihi ihe kpatara ya n'ihi na izochi ntachi ahụ na-anapụ ụlọ ọrụ nke windo mbelata iwu 72-hour GDPR / HIPAA.

Isi mmalite na nduzi ọchịchị¶

• ** Kọmiti nchekwa data nke Europe (EDPB) & Ụlọ Ọrụ Kọmishọna Ozi UKICO):** * Ntuziaka 9/2022 na ọkwa nbibi data nkeonwe n'okpuru GDPR (Isiokwu 33 na 34: elekere elekere 72, ọdụ ụgbọ mmiri nchekwa nzuzo, na ihe nlere anya nhichapụ nke nnata ntụkwasị obi)*.
• ** U.S. Ngalaba Ahụike na Ọfịs Ọrụ Ndị mmadụ maka ikike obodo (HHS OCR): *** * Iwu Ịkwado Mmebi HIPAA (45 CFR §§ 164.400-414)*, Ntụziaka nyocha ihe ize ndụ nke imebi ihe anọ, na Ntuziaka iji nye ozi ahụike echedoro enweghị ike, enweghị ike ịgụ, ma ọ bụ enweghị ikike nye ndị mmadụ n'enweghị ikike (NIST SP 800-111 Encryption Safe Harbor).
• ** National Institute of Standards and Technology (National Institute of Standards and Technology)NIST, United States):** NIST SP 800-61 Mkpu. 2 Ntuziaka njikwa ihe mberede Kọmputa na NIST SP 800-122 Ntuziaka iji kpuchido nzuzo nke ozi achọpụtara onwe onye (PII).
• Microsoft Corporation: Echeta ozi dabere na igwe ojii na mgbanwe nka nka n'ịntanetị (techcommunity.microsoft.com) na *Mgbochi mfu data nke Microsoft Purview (DLP), Label Sensitivity, na akwụkwọ nyocha akwụkwọ *.
• ** American Bar Association (ABA) & U.S. Federal Iwu nke akaebe:** * ABA Formal Opinion 05-437 / 11-460 na Federal Rule of Evidence 502(b) (Ngosipụta n'amaghị ama nke nkwurịta okwu dị mkpa na usoro nrịbama ngwa ngwa)*.

Ntuziaka emetụtara¶

• Mbugharị mberede ma ọ bụ otu ndị otu ihuenyo-ekesa ihie, ihe na-ekpo ọkụ mic, na ịdekọ iweghachi azụ
• Mbelata nchekwa data mmepụta ihe mberede, ntapu nzuzo git, na nhazi ihe merenụ
• Nchekwa ime ime ọrụ mberede yana nzuzo data
• Ezuru ma ọ bụ gbajiri laptọọpụ ọrụ mgbe ị na-eme njem: MDM mkpọchi na mgbake oge efu
• Nọmba mberede