An internal data breach discovery plan can be set up in two easy steps. An overview of the process looks like this: Identify data of value - finding the data sets that relate to business processes is the easy part. The hardest part is finding out if any copies of the data exist elsewhere.