Example incident report form

This, or a similar form, should be used for handling, tracking, and recording incident response activities:

Let's look at the different fields shown in the preceding form:

• Fields 1 through 5 should be completed based on the initial incident report alone. It is expected that these fields are completed before you start the severity determination discussions.
• Field 6 is intended to hold a more technical description of the incident based on analysis by the Technology Owner(s).
• Field 7 holds the name of the Incident Lead. This field can be completed as soon as the Incident Lead is assigned.
• Field 8 holds the current incident status as incident handling proceeds.
• Field 9 contains the case number and the names of related incidents. These incidents could be previous or current and could be within OT, an IT incident, or an externally known incident.
• Field 10 is a categorization of a type of incident. More...