You handle a reported data breach in Cenedril under Documentation → Data Breach Management. Open the incident from the list and work it through five stages: Triage, Assess, Decide, Execute and Close. A countdown at the top of the incident shows the time left against the 72-hour GDPR Art. 33 deadline, so you can send the authority notification on time.
Pick the incident
Open Data Breach Management
In the sidebar open Documentation and select Data Breach Management. The page lists every reported incident, sorted by the most pressing deadline. Use the All Incidents, Active and Closed tabs to narrow the list.
Open the incident
In the incident’s row, click View Details. The incident opens with its identifier, the description and a progress bar across the five handling stages. If a 72-hour deadline is active and the authority has not yet been notified, a countdown runs at the top.
Triage and assess the risk
Triage the incident (Triage)
In the first stage, Triage, you confirm whether this is a genuine data breach. Under What happened? enter a factual description and add Type of breach, Likely cause, Current containment status and Initial actions taken. Save with Update Incident Details; Cenedril then moves on to the next stage.
Assess the risk to individuals (Assess)
In the Assess stage you estimate the risk of harm to the affected individuals, split into Likelihood of Harm and Severity of Impact. Cenedril highlights objective risk indicators such as special category data or a large-scale incident and derives a risk level (low, medium, high) from them. Save with Update Risk Assessment.
Decide on notifications and execute
Decide on notifications (Decide)
In the Decide stage, based on the risk level Cenedril indicates whether a Supervisory Authority Notification and a Data Subject Notification is required, recommended or optional, each with the legal reference (GDPR Art. 33 and Art. 34). For each notification choose Yes, notify or No, do not notify. If you decide against a recommended notification, enter a justification. Save with Update Notification Decisions.
Send notifications and document (Execute)
In the Execute stage you complete the formal GDPR documentation (likely consequences, remedial and mitigation measures taken) and send the due notifications. Once a notification has gone out, use Mark as Completed to record it as sent. The countdown for the authority notification then ends, and the incident status moves to Authority Notified or Subjects Notified.
Close
Close the incident (Close)
The Close stage shows a checklist covering risk assessment, notification decisions and documentation. Once all required actions are done, capture what you learned under Post-Incident Analysis and close the case with Complete & Close Incident.
Optionally link to information security
Below the stages you find the option This incident is also an information security incident. It creates a linked security incident from the data breach and carries over the title, description and timestamps. This link is available with the ISMS module (Professional).
Result: the incident has been worked through all five stages, the due notifications are marked as completed, the post-incident analysis is documented, and the closed incident sits in the list read-only with status Closed.