The breach lessons connect handling controls with legal responsibilities. They go beyond the available revision; see the topic’s stated scope below.
Include the new learning-only GRC material: GRC quiz or GRC flashcards in the All topics track. No new exam alignment is claimed.
Evidence labels show where each concept’s recorded learning comes from: classroom sessions, Study Buddy sessions, supplementary Study Guide explanations or a mix. Reviewed revision may go further, so you can study ahead. Available questions do not imply complete topic or exam coverage.
Official syllabus references
CompTIA Security+
Exam version SY0-701 · All 28 numbered objectives represented; detailed bullets and revision content remain partial.
4.8 · Incident response
Related groups: 4.0 · Security operations. Topic organisation is editorial; consult the official specification for full detail.
CREST CPIA
Specification 8.1 · All official groups represented; only selected verified skill IDs are catalogued. Detailed skills and revision content remain partial.
A1 · Engagement lifecycle management
Related groups: A · Soft skills and incident handling. Topic organisation is editorial; consult the official specification for full detail.
Full incident-response lifecycle
Evidence: Not yet recorded
Revision material not yet added · 0 questions · 0 flashcards
Exam relevance
CREST CPIA
CPIA · A1 · direct
This concept relates to the cited objective. Course coverage and authored revision do not establish full objective coverage.
Verified for CPIA: 0 of 0 questions and 0 of 0 flashcards. The mapping does not verify the others.
Reviewed revision scope
Revision scope has not yet been authored and reviewed.
Outside the authored revision scope
Full incident-response lifecycle
Recorded evidence
Not yet recorded in classroom, Study Buddy or Study Guide learning. This does not prevent revision.
Not established by the recorded evidence
Full incident-response lifecycle
Reviewed 2026-09-16. Reviewed against the linked repository learning record. Scope is introductory; no practical competence or complete objective coverage is implied.
Personal data breach assessment
Evidence: Mixed
Revision: Available · 3 questions · 2 flashcards
Exam relevance
Learning-only · no verified exam mapping
Reviewed revision scope
Personal data breaches can affect confidentiality, integrity or availability; investigate possible incidents promptly, distinguish awareness, assess risk to people, notify ICO unless risk is unlikely and communicate high-risk breaches to individuals subject to exceptions; record all breaches and decisions. ICO notification is without undue delay and, where feasible, within 72 hours of awareness; high-risk individual communication is without undue delay subject to Article 34 exceptions; processors inform controllers without undue delay and incomplete reports may be phased.
Complete exam objectives or verified exam alignment
Recorded evidence
Personal data breaches can affect confidentiality, integrity or availability; investigate possible incidents promptly, distinguish awareness, assess risk to people, notify ICO unless risk is unlikely and communicate high-risk breaches to individuals subject to exceptions; record all breaches and decisions. ICO notification is without undue delay and, where feasible, within 72 hours of awareness; high-risk individual communication is without undue delay subject to Article 34 exceptions; processors inform controllers without undue delay and incomplete reports may be phased.
Session 3: Governance, Risk and Compliance — Classroom session record · Governance and Accountability; Risk and Measurement; Risk Management Lifecycle; Risk Treatment; Compliance Is Not the Same as Security; Risk Appetite vs Risk Tolerance; CVSS and Business Risk; ISO/IEC 27001 and 27002; Cyber Essentials; NIST Cybersecurity Framework; UK GDPR and Data Protection; Data Classification; UK GDPR Lawful Bases; ICO and the 72-Hour Rule; PCI DSS
Session 4: Governance, Risk and Compliance — In Depth — Classroom session record · The Three GRC Pillars; Compliance ≠ Security; ISO/IEC 27001 and Continual Improvement; Why Consultants Need Business Context; Business Impact Analysis; Assessing Risk; Identifying and Managing Risk; Frameworks and Standards; UK GDPR and Data Protection; Data Classification and Handling
Data Protection: UK GDPR and the DPA 2018 — Supplementary Study Guide explanation · The seven data-protection principles; Lawful bases and current law; Controllers, processors and service providers; Worked breach assessment
Not established by the recorded evidence
Completed professional practice or legal advice
Complete exam objectives or verified exam alignment
Material outside the named introductory scope
Reviewed 2026-09-22. Reviewed against approved Sessions 3–4 learning and Core Concepts explanations. Fictional applications are educational elaborations, not completed practical work. Learning-only; this concept has not yet been individually verified against the Security+ SY0-701 objectives or any other exam syllabus.