security incident report form template word

Corporate Security Incident Report Form

Instructions for Use

• Complete all fields immediately upon discovery or notification of a potential security breach to ensure an accurate evidentiary timeline.
• Attach all relevant digital logs, physical evidence, or correspondence to this document before submitting it to the [Department Name/Privacy Officer].
• Maintain strict confidentiality; do not discuss the contents of this report with unauthorized personnel, as this document may be subject to attorney-client privilege.

Parties & Definitions

Reporting Party: [Full Legal Name] Department/Location: [Department Name] Incident Reference Number: [] Date/Time of Discovery: [] Nature of Incident:

• Unauthorized Data Access
• Physical Security Breach
• Malware/Ransomware
• Loss of Company Property
• Other: [__________]

Operative Clauses

1. Incident Description: Provide a detailed, chronological narrative of the events leading to and following the discovery of the incident. Include specific systems, files, or physical areas affected: [__________]

2. Impact Assessment: Identify the scope of potential damage, including whether Personal Identifiable Information (PII), Protected Health Information (PHI), or proprietary trade secrets were compromised: [__________]

3. Containment Measures: Detail all immediate actions taken to mitigate the incident, such as isolating servers, changing access credentials, or alerting law enforcement: [__________]

4. Evidence Preservation: List all items preserved for investigation, including log files, hardware serial numbers, surveillance footage, or witness statements: [__________]

5. Notification Status: Indicate if external parties (clients, regulators, law enforcement) have been notified:

• No external notification required
• Regulatory body notified on [Date]
• Law enforcement notified on [Date]
• Affected individuals notified on [Date]

Signature & Acknowledgment

I hereby certify that the information provided in this report is accurate and complete to the best of my knowledge as of the date signed below.

Signature: __________ Printed Name: [] Title: [] Date: [__________]

Legal Disclaimer: This document is a general framework and does not constitute legal advice. Security incident response requirements vary significantly by jurisdiction and industry. Consult with qualified legal counsel to ensure your internal procedures comply with applicable data protection laws and reporting obligations.