GDPR requires organisations to have a plan along with the necessary process and controls to detect a data breach, regularly evaluate the effectiveness of security practices, and document evidence of compliance.
This checklist is an easy way of seeing how prepared you are to meet these new requirements