<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div dir="ltr"></div><div dir="ltr">Hi,</div><div dir="ltr"><br></div><div dir="ltr">It should follow these guidelines as far as I am aware.</div><div dir="ltr"><br></div><div dir="ltr"><div style="display: block;" class=""><div style="-webkit-user-select: all; -webkit-user-drag: element; display: inline-block;" class="apple-rich-link" draggable="true" role="link" data-url="https://www.oaic.gov.au/privacy/guidance-and-advice/data-breach-preparation-and-response"><a style="border-radius:10px;font-family:-apple-system, Helvetica, Arial, sans-serif;display:block;-webkit-user-select:none;width:300px;user-select:none;-webkit-user-modify:read-only;user-modify:read-only;overflow:hidden;text-decoration:none;" class="lp-rich-link" rel="nofollow" href="https://www.oaic.gov.au/privacy/guidance-and-advice/data-breach-preparation-and-response" dir="ltr" role="button" draggable="false" width="300"><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:#E9E9EB;font-family:-apple-system, Helvetica, Arial, sans-serif;" class="lp-rich-link-emailBaseTable" cellpadding="0" cellspacing="0" border="0" width="300"><tbody><tr><td vertical-align="center"><table bgcolor="#E9E9EB" cellpadding="0" cellspacing="0" width="300" style="font-family:-apple-system, Helvetica, Arial, sans-serif;table-layout:fixed;background-color:rgba(233, 233, 235, 1);" class="lp-rich-link-captionBar"><tbody><tr><td style="padding:8px 0px 8px 0px;" class="lp-rich-link-captionBar-textStackItem"><div style="max-width:100%;margin:0px 16px 0px 16px;overflow:hidden;" class="lp-rich-link-captionBar-textStack"><div style="word-wrap:break-word;font-weight:500;font-size:12px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-topCaption-leading"><a rel="nofollow" href="https://www.oaic.gov.au/privacy/guidance-and-advice/data-breach-preparation-and-response" style="text-decoration: none" draggable="false"><font color="#000000" style="color: rgba(0, 0, 0, 1);">Data breach preparation and response</font></a></div><div style="word-wrap:break-word;font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-bottomCaption-leading"><a rel="nofollow" href="https://www.oaic.gov.au/privacy/guidance-and-advice/data-breach-preparation-and-response" style="text-decoration: none" draggable="false"><font color="#A2A2A9" style="color: rgba(60, 60, 67, 0.6);">oaic.gov.au</font></a></div></div></td><td style="padding:6px 12px 6px 0px;" class="lp-rich-link-captionBar-rightIconItem" width="36"><a rel="nofollow" href="https://www.oaic.gov.au/privacy/guidance-and-advice/data-breach-preparation-and-response" draggable="false"><img style="pointer-events:none !important;display:inline-block;width:36px;height:36px;border-radius:3px;" width="36" height="36" draggable="false" class="lp-rich-link-captionBar-rightIcon" alt="apple-touch-icon.png" src="cid:AFD5B43E-C1AE-47CB-91B4-92A26C11B8D1"></a></td></tr></tbody></table></td></tr></tbody></table></a></div></div><br></div><div dir="ltr"><br></div><div dir="ltr">Serge</div><div dir="ltr"><br><blockquote type="cite">On 27 Sep 2022, at 19:40, Michael Hockey <mqh@miju.com.au> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr">
<style id="signatureStyle">#x04a0c4f580e54ef #xeeab89d2a03a4e12ac844dd14d5957d1 .plain tt { font-family: monospace; font-size: 100%; font-weight: normal; font-style: normal; }
#x04a0c4f580e54ef #xeeab89d2a03a4e12ac844dd14d5957d1 .plain div.plain_line { white-space: pre-wrap; }
#x04a0c4f580e54ef #xeeab89d2a03a4e12ac844dd14d5957d1 a { color: rgb(0, 0, 238); }
#x04a0c4f580e54ef #xeeab89d2a03a4e12ac844dd14d5957d1 a:visited { color: rgb(85, 26, 139); }
#x04a0c4f580e54ef #xeeab89d2a03a4e12ac844dd14d5957d1 { font-family: "Segoe UI"; font-size: 12pt; color: rgb(0, 0, 0); margin-left: 0px; margin-right: 8px; background-color: rgb(255, 255, 255); }
#x04a0c4f580e54ef #xeeab89d2a03a4e12ac844dd14d5957d1 .plain tt { font-family: "Segoe UI"; font-size: 12pt; }</style>
<style id="css_styles">blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right: 0px; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); }
blockquote.cite2 { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right: 0px; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
li[style="text-align: center;"], li[style="text-align: center; "], li[style="text-align: right;"], li[style="text-align: right; "] { list-style-position: inside; }
body { font-family: "Segoe UI"; font-size: 12pt; }
.quote { margin-left: 1em; margin-right: 1em; border-left-width: 5px; border-left-style: solid; border-left-color: rgb(235, 235, 235); padding-left: 0.3em; }</style>
<div>I received one of those emails from Optus today. But I did phone Optus as I had a curious incident related</div><div>to a third party entity that links via Optus. The Optus help line was not helpful, the hold music was very loud and</div><div>the queue wait kept getting longer.</div><div><br></div><div>I asked them what steps they took to notify other institutions <before> they went public.</div><div><br></div><div>It is obvious that Optus had to have a plan in place - </div><div>eg steps to do if <this particular thing> happened (insert whatever you want here - fire, network down, etc)</div><div>and going public is not step 1.</div><div><br></div><div>So does anyone have any information as to what the Optus data breach plan was likely to be. ?</div>
<div><br></div><div id="signature_old"><div id="x04a0c4f580e54ef"><div id="xeeab89d2a03a4e12ac844dd14d5957d1"><div class="plain"><tt style="word-wrap:break-word"><div class="plain_line">Michael Hockey </div>
<div class="plain_line">CISM (Ret),CISA (Ret),MACS,BA,BSc PO Box 176, Corinda Q 4075, Australia</div>
<div class="plain_line">Phone: +61 0409 835 041 </div>
<div class="plain_line">Email: <a href="mailto:michael.hockey @miju.com.au">michael.hockey @miju.com.au</a> </div></tt></div></div></div></div><div><br></div>
<span>_______________________________________________</span><br><span>AusNOG mailing list</span><br><span>AusNOG@ausnog.net</span><br><span>https://lists.ausnog.net/mailman/listinfo/ausnog</span><br></div></blockquote></body></html>