We have a clearly defined crisis management framework to manage any such situation – a core team makes an initial assessment and coordinates external and internal activities, while an operational team deals with the actual breach.