Security Bad Actor Assessment Form
Use this form to document and evaluate suspicious or potentially malicious actors, their behavior, the impact observed, and the recommended security response.
Assessment Details
Incident/Report Title
*
Assessment Date
*
-
Month
-
Day
Year
Date
Assessor Name or Team
*
Source of Report
*
Please Select
Employee Report
Customer Report
System Alert
Third-Party Notice
Other
Location or Asset Affected
*
Bad Actor Profile and Behavior
Actor Type
*
External Attacker
Insider
Unknown
Vendor/Partner
Other
Observed Behavior Summary
*
Suspicious Activity Categories
*
Phishing
Credential Misuse
Unauthorized Access Attempts
Malware
Data Exfiltration
Social Engineering
Policy Bypass
Physical Intrusion
Other
Frequency of Incidents
*
One-time
Repeated
Ongoing
Overall Threat Severity
*
1
2
3
4
5
Impact and Assessment Outcome
Systems/Data Affected
Estimated Impact Level
*
Low
1
2
3
Critical
4
1 is Low, 4 is Critical
Immediate Actions Taken
Recommended Next Steps
Final Assessment Status
*
Please Select
Low Risk
Monitor
Escalate
Contain
Closed
Submit
Should be Empty: