Data Breach Response Incident Log Form

Data Breach Response Incident Log Form — Form Fields

This operations template includes 13 fields. Document a data breach or security incident as it unfolds, capturing timeline, scope, and response actions. Free to customize and use on ZenBuild.

• Incident Commander Name (text, required)
• IC Email (email, required)
• Date and Time Incident Detected (text, required)
• Date and Time Incident Started (estimated) (text, required)
• Incident Type (dropdown selection, required) — options: Unauthorized access, Data exfiltration, Ransomware, Phishing compromise, Insider threat, Lost/stolen device, Third-party breach, Other
• Data Types Affected (dropdown selection, required) — options: PII, Financial data, Health data, Credentials/passwords, Trade secrets, No sensitive data, Unknown
• Estimated number of records affected (number, optional)
• Description of the breach (long text, required)
• Immediate containment actions taken (long text, required)
• Are customers affected? (dropdown selection, required) — options: Yes, No, Unknown
• Regulatory reporting required? (dropdown selection, required) — options: Yes (GDPR 72hr), Yes (CCPA), Yes (HIPAA), Possibly, No, Unknown
• Next steps and responsible parties (long text, required)
• Outside counsel or DPO notified? (text, optional)