A Clean Rebuild Is Not a Data Inventory

Verify unexpected contact and make retention evidence part of incident response.

Verify unexpected contact and make retention evidence part of incident response.

A dated update adds the 19 October attack confirmation and Albert Heijn’s current guidance on deliveries, refunds and account credit.

Reconcile before replaying.

Treat remote refrigeration as production infrastructure.

Verify the live flag, then plan the upgrade.

CISA confirms exploitation of GitLab's critical CI/CD regexp flaw. Check supported fixes, preserve evidence and verify the version running on every node.

Retention needs a current purpose.

When an AI agent can touch personal data and external tools, organisations need a record of permissions, approvals, actions and outcomes.

Give the next owner a record they can actually use.

Reconcile writes before repeating work.