Incident Report Template

Incident Report Template

Incident Report Form

---

Section 1: Incident Identification

| Field | Information | |-------|-------------| | Incident ID | INC-[YYYY]-[NNNN] | | Report Date | | | Reporter Name | | | Reporter Contact | |

Incident Classification

| Type | Check | |------|-------| | ☐ Security Incident | | | ☐ Operational Incident | | | ☐ Privacy/Data Breach | | | ☐ Compliance Violation | | | ☐ Near Miss | | | ☐ Other | |

Severity Level

| Level | Definition | Check | |-------|------------|-------| | Critical | Major impact, immediate action | ☐ | | High | Significant impact, priority response | ☐ | | Medium | Moderate impact, standard response | ☐ | | Low | Minor impact, routine handling | ☐ |

---

Section 2: Incident Details

Date/Time Discovered: _____________________

Date/Time of Occurrence (if known): _____________________

Location/System Affected: _____________________

Description of Incident: [Provide detailed description of what occurred]

How Was Incident Discovered? ☐ Monitoring/Alert ☐ User Report ☐ Third Party Notification ☐ Audit/Review ☐ Other: ___________

---

Section 3: Impact Assessment

Systems/Applications Affected: | System | Impact Description | |--------|-------------------| | | | | | |

Data Affected: ☐ Customer Data ☐ Employee Data ☐ Financial Data ☐ Confidential Business Data ☐ Public Data ☐ Unknown

Number of Records Affected: _____________________

Business Impact: ☐ Service Disruption: Duration ___ ☐ Financial Loss: Estimate $ ___ ☐ Regulatory Impact: ___ ☐ Reputation Impact: ___

---

Section 4: Response Actions

Immediate Actions Taken: | # | Action | Date/Time | By Whom | |---|--------|-----------|---------| | 1 | | | | | 2 | | | | | 3 | | | |

Current Status: ☐ Contained ☐ Eradicated ☐ Recovered ☐ Under Investigation ☐ Closed

---

Section 5: Root Cause Analysis

Root Cause Category: ☐ Human Error ☐ Process Failure ☐ Technology Failure ☐ External Attack ☐ Third Party ☐ Unknown/Under Investigation

Root Cause Description: [Detailed root cause analysis]

---

Section 6: Remediation

Recommended Actions: | # | Action | Owner | Target Date | Status | |---|--------|-------|-------------|--------| | 1 | | | | | | 2 | | | | |

Lessons Learned: [Key takeaways and improvements]

---

Section 7: Notifications

| Stakeholder | Required? | Notified? | Date | |-------------|-----------|-----------|------| | Executive Management | ☐ Yes ☐ No | ☐ | | | Legal | ☐ Yes ☐ No | ☐ | | | Regulators | ☐ Yes ☐ No | ☐ | | | Affected Customers | ☐ Yes ☐ No | ☐ | | | Law Enforcement | ☐ Yes ☐ No | ☐ | |

---

Approvals

| Role | Name | Signature | Date | |------|------|-----------|------| | Incident Manager | | | | | Function Head | | | | | CISO/CRO | | | |