We have this helpful article: What is HIPAA Breach Notification? Which discusses security incident/breach investigation and documentation processes. Additionally, module 5 of our Engaging in HIPAA Security and Digital Confidentiality as a Mental Health Professional course (also included in our Telemental Health Certificate Program) is devoted to handling security incidents and breaches. For consultation you can reach us at our Office Hours for solo practitioners or our Group Practice Office Hours.