Incident Response Plan

1. Detect and contain: preserve evidence, revoke access and stop propagation.
2. Assess: information type, affected persons, probability and severity of harm.
3. Document: open and update the incident register, decisions, communications and measures.
4. Notify: promptly notify the Commission and affected persons when a serious risk of harm exists.
5. Correct: remove the cause, test, monitor and modify controls.
6. Learn: produce a post-incident record without exposing persons or exploitable vulnerabilities.

Emergency contact: info@quebec.ai. Do not publicly disclose an exploitable vulnerability before responsible coordination.