Security incident process

Report suspected application incidents to mail@accusolveaccountants.com. Do not include passwords, authentication codes or payment credentials.

1. Record the time, affected service and a safe description of the issue.
2. Contain unauthorised access and preserve relevant evidence securely.
3. Assess affected accounts, data, likely impact and recovery options.
4. Assess and make notifications to affected customers and relevant authorities where required.
5. Record recovery, follow-up actions and lessons learned.

Access to incident evidence is limited to people who need it for investigation and recovery.