When information that should be private gets seen, taken or exposed by someone who should not have it.
Like finding the filing cabinet drawer open and files missing: you need to know what was inside, who is affected and who to tell.
Cyber contains the threat as part of incident response. A breach response procedure and a breach log are vCIO outputs.
Do I have to tell my clients if there is a breach? It depends on what was exposed and the risk of harm. Check current rules with the Privacy Commissioner or your lawyer, and keep a written record either way.

Every WILDCARD card exists to solve one named problem. Find yours.