An internal Data Breach Incident Response Plan, tailored to your organisation, sector, and jurisdiction (Zimbabwe CDPA and/or South Africa POPIA). Covers your incident response team and roles, detection and severity triage, the correct regulator/data-subject notification deadlines under the applicable law, containment steps, and post-incident review – with a ready-to-complete regulator notification letter included as an appendix.
Keep this on hand before an incident happens, not during one.