Book online

The Cyber Security and Resilience (Network and Information Systems) Bill marks a shift towards a more proactive approach to cyber resilience. Organisations are expected to actively assess and mitigate risks, while demonstrating robust continuity planning, risk management and governance that meet national resilience standards.

Westminster Insight’s timely Preventing and Responding to a Data Breach online training is designed to help you respond quickly, confidently, and effectively when a data breach occurs. Strengthen your organisation’s breach response procedures and minimise the legal, financial, operational and reputational impact of an incident.

Led by our expert trainer, this course provides a practical overview of current UK data breach requirements, including recent changes introduced by the Data (Use and Access) Act and the latest reporting obligations under UK GDPR and PECR. Learn when breaches must be reported and how to decide whether affected individuals also need to be notified.

This training also covers effective risk assessment, damage limitation measures, legal responsibilities, and ICO reporting requirements. In addition, you will explore lessons learned from real-life data breaches and discover how organisations can use these experiences to strengthen future resilience and improve response procedures.

Take part in interactive, scenario-based exercises that allow you to practise decision-making, test response plans, and discuss challenges. Leave the day with the confidence, knowledge, and practical tools needed to respond effectively to a data breach when it matters most.

Trainers

Simon Blanchard (CIPP/E)

Expert Trainer

Who should attend

This workshop is aimed at public, private and third sector organisations. Relevant and beneficial for board level executives, senior management, data protection and information technology teams, who’ll be at the forefront of any organisation’s response to a data breach.

Board Members & Senior Executives
Data Protection Officers
Legal Counsel & Chief Compliance Officers
Chief Technology Officers & Information Officers
Information Technology & Security Teams
Public Relations & Communications Teams

Online Training

Participate in live training online
Group work and practical scenarios
Course materials

The course has really developed my understanding on privacy and data protection, and I feel like I now have open channels to enquire through should I have a question in future.
Lou Abbott-Williams, Eurofins Agroscience Services

The training was helpful and covered a huge amount of information. The trainer was very engaging and I enjoyed hearing from other participants about their experiences and knowledge.
Lisa Weylandt, includem

Interesting, helpful and delivered well by a personable trainer throughout. I definitely improved my knowledge and therefore found the session beneficial.
Sarah Kingham, Recruiting Group

Very informative session on data breaches, with the right balance between delegate experiences, examples, and interaction and trainer led content. There was plenty of practical takeaways that delegates can go away and discuss with colleagues, governance teams, and their organisation for enhanced risk management and information governance.
Chris Burn, CSRB Limited

Course Outcomes

Learn how to prepare for, respond to, and recover from cyber incidents
Navigate key requirements of the Data (Use and Access) Act
Triage a breach and assess your preparedness
Evaluate the effectiveness of your organisation’s data breach procedures
Assess when a breach must be reported, including ICO notification and communications with affected individuals
Benchmark data security risks to support informed decision-making
Apply the Cyber Governance Code of Practice to board-level oversight
Strengthen staff awareness to prevent and detect cyber threats

Agenda

10:00 - 10:15

Welcome and Introduction

Simon Blanchard (CIPP/E)

Expert Trainer

10:15 - 10:45

Understanding Data Breaches & Incidents

The Cyber Security and Resilience (Network and Information Systems) Bill, the Data Use and Access Act and ICO guidance
Distinguishing a personal data breach from a data incident
Types of breach: cyber & non-cyber threats
Reporting requirements
Trends in breach reporting
Recent high-profile breaches and key learnings

10:45 - 11:15

Planning Ahead: Developing a Playbook and Mitigating Risks

Defining roles and responsibilities during a cyber incident
Applying the Cyber Governance Code of Practice to incident planning, response and recovery
Developing and maintaining a data breach playbook
Embedding incident response across your organisation
Using the Cyber Essentials Certification to strengthen cyber resilience
Run a cyber incident simulation

11:15 - 11:30

Morning Break

11:30 - 12:00

‘We’ve Had a Data Breach!’: The First 24-48 Hours

Assembling a first responder team
Identifying compromised data
Containing a breach and preventing escalation
Gathering and storing evidence

12:00 - 12:45

What Comes Next?

Investigating the true circumstances of a breach: what happened and why
Assessing impact on individuals and the organisation
Spotlight on business risks: potential financial, reputational and legal consequences
Using a risk matrix to support decision-making
ICO reporting requirements: timescales, reporting thresholds and notifying affected individuals
Wider legal and regulatory obligations

12:45 - 13:30

Lunch Break

13:30 - 14:15

Scenario-based Group Exercises

Work through realistic breach scenarios and determine the best response.

Cyber breach: assess the incident, identify key risks and determine your next steps
Non-cyber breach: evaluate the response required when a breach arises outside of a cyber attack
Processor breach: examine a third-party data breach, the resulting obligations and your responsibilities

14:15 - 14:45

Prevention is Better than Cure

Identifying data threats, risk areas and vulnerabilities across your organisation
Using information security risk assessments to strengthen resilience, support compliance and mitigate risks
Reducing human error through effective training and awareness: building a culture of data protection in your organisation

14:45 - 15:15

Acting on Lessons Learnt: The Aftermath

Taking action to reduce the risk of future incidents: cyber security controls
Maintaining business operations while recovering information
Restoring trust and confidence with customers, stakeholders and regulators following a breach

15:15 - 15:45

Q&A

15:45

Close of Course

Simon Blanchard (CIPP/E)

Expert Trainer

CPD

This course is CPD Certified.

Contribute 6 hours towards your Continuing Professional Development (CPD) and receive a certificate of attendance.

In-house Training

This course can also be offered as in-house team training. Find out more about our tailored training solutions by contacting us at [email protected]

In-House Training

Data Protection Essentials Online Training

Monday 25th January 2027

Data Management Training Courses

Handling Data Subject Access Requests Online Training

Thursday 26th November 2026

Data Management Training Courses

Data Protection Impact Assessments Online Training

Thursday 3rd December 2026

Data Management Training Courses

Preventing and Responding to a Data Breach

Online Training

Course Outcomes

Agenda