Your Data Security Incident Response Policy should include a reference to your Incident Response Plan or Procedure which should require that an Incident Report be completed for each security incident. An incident report example can be found at the California Department of Finance page here.
This is a very thorough report that requires you to fill in information on topics like:
- Date and Time Incident Occurred
- Description of Incident
- Estimated Cost of Incident
- Corrective Actions Taken to Prevent Future Occurances
- Estimated Costs of Corrective Actions
- Have Those Responsible for the Incident Been Identified?
- If So, How Many Individuals Were Involved?
- Will Criminal Charges Be Filed?
Check it out here.
{ 1 trackback }