Sample Security Statement?

Hi VATUG!

While it feels a bit like walking under a ladder or opening an umbrella indoors, I'm researching sample security statements that other arts&culture organizations may use/have at the ready for data breach emergencies.

This is obviously something none of us want to have happen, but I think it's worth having a statement about our security measures already established so we don't have to worry about making one during a crisis.

Have any of you established a security statement? Know any orgs that have?

Any pointers are appreciated.

Thanks!