Cybersecurity Incident Lifecycle Tracker Form
Track a cybersecurity incident from detection through closure using clear status, scope, response, and resolution details.
Incident Identification
Incident Title
*
Incident ID / Case Number
*
Date/Time Detected
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Hour Minutes
AM
PM
AM/PM Option
Reporting Channel
*
Please Select
Email
SIEM Alert
Endpoint Detection
User Report
Vendor Notice
Other
Incident Classification and Scope
Incident Type
*
Please Select
Malware
Phishing
Credential Compromise
Unauthorized Access
Data Exposure
DDoS
Suspicious Activity
Other
Severity Level
*
Low
Medium
High
Critical
Affected Asset/System
*
Business Impact Summary
Lifecycle Tracking and Response
Current Lifecycle Stage
*
Detected
Triaged
Contained
Eradicated
Recovering
Closed
Containment Actions Taken
Root Cause / Initial Cause Analysis
Resolution Date/Time
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Hour Minutes
AM
PM
AM/PM Option
Incident Status Notes / Closure Summary
Submit Incident
Should be Empty: