Updated 14 days ago
Incident Report#
Fill this out when something goes wrong with a live tool. The sooner you document what happened, the faster it gets resolved.
If you are unsure whether something counts as an incident, see When to Escalate.
Tool name: ___
Reported by: ___
Date and time discovered: ___
Severity#
Check one:
Ask yourself:
- Is anyone's personal data exposed or at risk? → Critical
- Are minors affected? → Critical
- Could this cause legal or compliance problems? → Critical
- Are users blocked with no workaround? → High
- Can users work around it? → Medium
- Is it just a visual or cosmetic issue? → Low
When in doubt, choose a higher severity. It is easier to downgrade than to explain why you underreported.
What happened?#
Describe what went wrong in plain language. Include what users saw, when it started, and how it was discovered.
Who is affected?#
- User type: ___ (internal staff / external users / students / parents)
- Approximate number affected: ___
- Are minors affected? Yes / No / Unknown
What did you do immediately?#
List the steps you took as soon as you discovered the issue. If you turned the tool off, say so.
Root cause (if known)#
What caused this? Check any that apply:
Details: ___
What needs to happen next?#
| Action | Who | By when |
|---|---|---|
| ___ | ___ | ___ |
| ___ | ___ | ___ |
| ___ | ___ | ___ |
Notifications#
Who has been told about this incident?
| Person / Team | How notified | When |
|---|---|---|
| ___ | ___ | ___ |
| ___ | ___ | ___ |
Lessons learned (fill in after resolution)#
Date resolved: ___
What would prevent this from happening again?
Changes made as a result:
Related documents#
Was this page helpful?