Summary
Describe what happened in two or three sentences, as the service desk would explain it to a customer.
Impact
- Which customers, services, and data were affected, and for how long.
- Was personal data involved, and how many people does it concern.
Response
List what we did and when, from detection to recovery, and who did it.
Notifications
Note which customers, authorities, and suppliers we informed, and when.
Root cause and lessons learned
Explain why it happened and what we change so it does not happen again.