Data Security Incident Contingency Plan Checklist
Use this form to document a security incident, track containment and recovery steps, and confirm contingency plan readiness.
Incident Overview
Incident date and time
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Hour Minutes
AM
PM
AM/PM Option
Incident reported by
*
Incident type or category
*
Phishing
Malware
Unauthorized access
Lost device
Data leak
Other
Brief incident summary or description
*
Impact and Containment
Affected Systems / Applications
*
Data Involved or Suspected to Be Involved
*
Customer Data
Employee Data
Operational Data
System Logs
Configuration Data
Other
Containment Actions Taken So Far
*
Incident Severity / Priority
*
Low
Medium
High
Critical
Escalation and Recovery
Notified teams/roles
*
IT Security
Legal/Compliance
Management
Help Desk
External Vendor
Other
Responsible owner/team
*
Recovery / next steps checklist
*
Isolate systems
Reset credentials
Preserve logs
Restore backups
Monitor systems
User communication
Other
Target recovery date/time
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Hour Minutes
AM
PM
AM/PM Option
Plan status
*
Please Select
Open
In progress
Contained
Recovered
Closed
Submit
Should be Empty: