Worksheet

Incident response timeline and roles

A timeline template that runs from detection through triage, containment, recovery and review. Each stage has a row for the responsible role, the expected time to the next stage and what must be logged. Filled in live, the sheet becomes the evidence record the review needs.

Name: ______________________   Business: ______________________   Date: ______________

Scroll the table sideways to see every column.

Cross out or rewrite any heading that does not fit your business. From the guide “What Should Be Included in a Software Incident-Response Plan?”, www.gullysystem.com/blog/what-should-be-included-in-a-software-incident-response-plan