A security compromise means personal information has, or may have, been accessed or acquired by an unauthorised person. This procedure sets out how we respond under section 22 of POPIA and the equivalent duty in Botswana's Data Protection Act 2024.
1. Reporting a suspected breach
- 1.1Staff, contractors and learners should report a suspected compromise at once to the Information Officer at coreknowledgedigital@gmail.com, with the subject "Security incident".
2. Step 1: contain
- 2.1We act immediately to stop the compromise: disable affected accounts or sign-in links, reset credentials, block access, and preserve logs as evidence.
3. Step 2: assess
- 3.1The Information Officer records what happened, which systems and learners are affected, what information is involved, and whether there is a real risk of harm. The record is kept.
4. Step 3: notify
- 4.1Where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we notify the Information Regulator and the affected learners as soon as reasonably possible after discovery, unless a public body responsible for the detection, prevention or investigation of offences asks us to delay.
- 4.2For learners in Botswana we also notify the Botswana Information and Data Protection Commission and affected persons within the time the Act requires.
- 4.3Our notice to learners is in plain language and says what happened, what information is involved, what we have done, what you can do to protect yourself, and who to contact. We send it by email.
5. Step 4: review
- 5.1After the incident we find the cause, fix it, update our controls and this procedure, and record what we learned.
6. Your role
- 6.1If you suspect that someone else has your login or sign-in link, tell us at once and change your password.