Information Incident Report Form This form is for managers and/or senior managers to complete, following the initial report of an information incident. It should not take more than 15 minutes to complete. If you are unsure about the procedures for managing an information incident, you should read the Council’s . Please provide as much information as possible. If you do not know the answer or you are waiting on the completion of further enquiries please state this and indicate when this information may be available. In addition to completing the form below, please provide any other supporting information that maybe relevant. In the wake of an information incident, swift containment and recovery of the situation is vital. Every effort should be taken to minimise the potential impact on affected individuals and the Council, and details of the steps taken to achieve this should be included in this form. Contact Details Please provide your contact details should we require further information concerning the incident (Name and job title, email address and contact telephone number) Details of the information incident Please describe the incident in as much detail as possible. When did the incident happen? How did the incident happen? If has been a delay in reporting the incident via the ICT Service Desk please explain your reason(s) for this. What measures and operational controls were in place to prevent and/or detect an incident of this nature occurring? Personal data placed at risk What, if any, personal data has been placed at risk? Please specify if any financial, commercial or personal sensitive data has been affected and provide details of the extent. How many individuals have been affected? Have the affected individuals been made aware that an incident has occurred? What are the potential risks, consequences and adverse effects on those individuals? Have any of the affected individuals complained about the incident and if so, what action has been taken?
Information Incident Report Form This form is for managers and/or senior managers to complete, following the initial report of an information incident. It should not take more than 15 minutes to complete. If you are unsure about the procedures for managing an information incident, you should read the Council’s . Please provide as much information as possible. If you do not know the answer or you are waiting on the completion of further enquiries please state this and indicate when this information may be available. In addition to completing the form below, please provide any other supporting information that maybe relevant. In the wake of an information incident, swift containment and recovery of the situation is vital. Every effort should be taken to minimise the potential impact on affected individuals and the Council, and details of the steps taken to achieve this should be included in this form. Contact Details Please provide your contact details should we require further information concerning the incident (Name and job title, email address and contact telephone number) Details of the information incident Please describe the incident in as much detail as possible. When did the incident happen? How did the incident happen? If has been a delay in reporting the incident via the ICT Service Desk please explain your reason(s) for this. What measures and operational controls were in place to prevent and/or detect an incident of this nature occurring? Personal data placed at risk What, if any, personal data has been placed at risk? Please specify if any financial, commercial or personal sensitive data has been affected and provide details of the extent. How many individuals have been affected? Have the affected individuals been made aware that an incident has occurred? What are the potential risks, consequences and adverse effects on those individuals? Have any of the affected individuals complained about the incident and if so, what action has been taken?
170App3.docx