Data breach issues are front page news in the cyber security arena, with recent high profile breaches occurring in the private and public sectors. The OMB and the National Institute of Standards and Technology have identified key data breach response practices, but according to recent Government Accountability Office reports agencies have been inconsistent in implementing them, and alternative practices may be more beneficial. As agencies standardize management and operational practices, what response mechanisms are in place? What is working? What is needed?