# Breach Credit Monitoring Workflow

## Phase 1: Vendor Activation (Days 1-3 After Breach Determination)
1. Contact pre-negotiated vendor (Experian) under retainer agreement SPG-EXP-2025-003.
2. Provide breach details: number of affected individuals, geographic distribution, data types, languages needed.
3. Vendor activates enrollment portal within 48 hours.
4. Generate unique activation codes for all affected individuals.
5. Test enrollment portal functionality, language options, and mobile compatibility.

## Phase 2: Communication Integration (Days 3-5)
1. Include enrollment instructions and activation codes in breach notification letters.
2. Set up dedicated enrollment support phone line.
3. Create FAQ for support operators covering enrollment issues.
4. Publish enrollment instructions on breach support web page.

## Phase 3: Enrollment Monitoring (Days 5-95)
1. Track daily enrollment volume.
2. Monitor failed enrollment attempts and resolve technical issues.
3. Send 30-day follow-up reminder to non-enrolled individuals.
4. Report weekly enrollment metrics to DPO.
5. Close enrollment portal at 90-day deadline.

## Phase 4: Ongoing Monitoring (Months 1-24)
1. Receive monthly vendor reports: alerts generated, claims filed, coverage utilization.
2. Monitor for identity theft reports from enrolled individuals.
3. Coordinate with vendor on any confirmed identity theft cases requiring restoration services.
4. At coverage end, provide individuals with information on continuing monitoring at their own expense.

## Phase 5: Closure
1. Document total enrollment, alert, and claim statistics.
2. Include credit monitoring metrics in the breach register and annual report.
3. File insurance recovery claim for eligible costs.