Comprehensive Incident Response & Breach Notification Procedures

Audience: Customers, security officers, compliance auditors
Prerequisites: None

🛡️ Overview

eXpress badging® is committed to safeguarding customer data and ensuring that any potential security incident is handled with speed, transparency, and accountability. Our incident response framework is built around:

Preparation – Documented processes, trained staff, and continuous monitoring.
Detection & Analysis – Regular vulnerability scans and penetration testing.
Containment & Eradication – Immediate actions to stop and mitigate threats.
Notification & Communication – Transparent customer updates and breach notifications, if required.
Recovery & Lessons Learned – Remediation, reporting, and process improvements.

📋 Our Incident Response Procedures

1. Preparation

All employees undergo background checks and cybersecurity awareness training.
Technical controls are aligned with NIST CSF 2.0 and ISO/IEC 27001 practices.
Routine penetration and vulnerability testing is performed.
🔗 Cybersecurity & Compliance Overview

2. Detection & Analysis

Customer, employee, contractor notification from webform, email, internal Team's messaging, inbound phone calls.
Continuous monitoring of systems, applications, and network activity.
Vulnerabilities are identified through Fortra VM reports and prioritized based on severity.
Internal IT and external specialists review findings.
🔗 Vulnerability Management & Remediation Process

3. Containment & Eradication

Immediate isolation of affected systems or accounts.
Application of security patches, configuration changes, or system resets.
Escalation procedures to senior management and technical leadership.
🔗 Cybersecurity Incident & Breach Response Process

4. Notification & Communication

Affected customers will be notified promptly in accordance with applicable laws and contractual obligations.
Communications include a description of the incident, the type of data involved, and steps taken to mitigate impact.
Customers receive ongoing updates until full remediation is complete.
🔗 Breach Liability Statement (new article 8/2025)

5. Recovery & Lessons Learned

Root cause analysis conducted.
Remediation measures applied and documented.
Incident formally closed only after validation by leadership.
Policy and process updates issued based on findings.

AI Incident Scope and Coordination

EBS’s incident-response framework includes security incidents involving AI systems, including unauthorized disclosure through AI prompts, attachments, outputs, shared conversations, or connected applications. EBS applies its established reporting, assessment, containment, investigation, provider escalation, notification, recovery, and documented-closure process to these events. Joe French, Owner and President, coordinates the response with relevant technical personnel and providers. Applicable data-use prohibitions remain in force; suspected violations must still be reported and investigated.

Detailed response steps:

https://support.expressbadging.com/knowledge/cybersecurity-incident-response-reporting-process

📜 Breach Liability & Customer Protection

eXpress badging® acknowledges sole liability for breaches directly arising from our systems, services, or personnel, subject to the terms of executed agreements. This accountability is backed by corporate insurance programs, including:

$2M Errors & Omissions (E&O)
$2M General Liability
Workers’ Compensation coverage for on-site staff

🔗 Breach Liability Statement

✅ Key Takeaways for Customers

You will be notified immediately in the event of a confirmed breach.
You will receive clear updates, reports, and remediation details.
You are not expected to carry the burden of a breach caused by eXpress badging®.

📖 Related Documentation

Last updated: 08/2025