Incident Response

Apr 9, 2026

•

10 min read

Plan Hard, Respond Fast: Is Your Incident Response Plan Lying to You?

A practical, non-legal guide to closing the gap between 'we have an IRP' and 'we can execute it at 10:47 p.m.'

Alia Luria

Incident Response

Breach Notification: The Timeline Myth that Makes Incidents Worse

Apr 6, 2026

•

12 min read

Breach Notification: The Timeline Myth that Makes Incidents Worse

A Fieldnotes guide to getting your first 48 hours right without confusing urgency with accuracy.

Alia Luria

Incident Response

Special Edition: The security and IP implications of Claude Code’s source leak

Apr 2, 2026

•

15 min read

Special Edition: The security and IP implications of Claude Code’s source leak

A Fieldnotes walkthrough of (1) what happened, (2) why it matters from a security standpoint for both Anthropic and enterprise customers, (3) how the IP story gets mushy when AI-generated authorship enters the chat, and (4) what the next year could look like for Anthropic now that the genie has slipped the bottle

Alia Luria

Incident Response

Acquisitions: When Two Data Inventories Become One Liability

Mar 9, 2026

•

18 min read

Acquisitions: When Two Data Inventories Become One Liability

Post-merger privacy integration basics, and how to pick first-90-days priorities so you do not inherit a data attic as a surprise.

Alia Luria

Incident Response

When You Contract with a Vendor, You Don’t Just Entrust Them with Your Data

Feb 24, 2026

•

11 min read

When You Contract with a Vendor, You Don’t Just Entrust Them with Your Data

You also entrust them with your reputation.

Alia Luria

Incident Response

Why We Should Stop (Always) Treating Privacy Tabletop Exercises Like Fire Drills

Feb 24, 2026

•

13 min read

Why We Should Stop (Always) Treating Privacy Tabletop Exercises Like Fire Drills

And start treating them like routine training exercises

Alia Luria

Incident Response

Plan Hard, Respond Fast: Is Your Incident Response Plan Lying to You?

Breach Notification: The Timeline Myth that Makes Incidents Worse

Special Edition: The security and IP implications of Claude Code’s source leak

Acquisitions: When Two Data Inventories Become One Liability

When You Contract with a Vendor, You Don’t Just Entrust Them with Your Data

Why We Should Stop (Always) Treating Privacy Tabletop Exercises Like Fire Drills

The Privacy Design Lab