{"id":298,"date":"2025-04-28T08:26:08","date_gmt":"2025-04-28T11:26:08","guid":{"rendered":"https:\/\/boasvindas.engdb.com.br\/?p=298"},"modified":"2026-04-06T12:18:55","modified_gmt":"2026-04-06T15:18:55","slug":"298","status":"publish","type":"post","link":"https:\/\/boasvindas.engdb.com.br\/?p=298","title":{"rendered":"How to prevent and report data breaches"},"content":{"rendered":"

Dear Colleague,<\/p>\n

We would like to draw your attention to a crucial aspect: protecting and securing personal data1<\/sup>\u00a0and company information.<\/p>\n

Hacker attacks are a known threat, but it is important to remember that information security can also be compromised by\u00a0human errors\u00a0<\/span>or due to\u00a0incorrect configuration of the applications\u00a0<\/span>and\u00a0improper data management<\/span>.<\/p>\n

For example, incorrectly setting the visibility cone of an application can result in a data breach2<\/sup>, because it allows unauthorized individuals to access personal data they should not view.<\/p>\n

Therefore, it is particularly important to:<\/p>\n

    \n
  1. Adopt the highest diligence and attention in handling clients and corporate personal data and confidential information, to limit human errors<\/li>\n
  2. Develop application code following secure development best practices and paying close attention to the functionalities that may compromise personal data, in adherence to Group policies and procedures<\/li>\n
  3. Set up access control and log management<\/li>\n
  4. Configure access to personal data according to the principles of need to know, least privilege, and data minimization<\/li>\n
  5. Conduct periodic Penetration Tests and Vulnerability Assessments on systems, both at the factory exit and during operation.<\/li>\n<\/ol>\n

    We remind you that,\u00a0in case of a suspected or confirmed data breach<\/span>, you must send an email with the subject line \u201cSuspected personal data breach\u201d including a brief description of what happened or suspected, to:<\/p>\n