Explore our Post-Incident Analysis Template, a comprehensive workflow facilitating effective incident management, documentation, and corrective actions.
1
Identify the incident
2
Record date, time and place of the incident
3
Identify the source/cause of the incident
4
Document immediate action taken
5
Determine and record the extent of the damage
6
Approval: Damage Assessment
7
Collect and review evidence
8
Gather and document witness statements
9
Prepare incident timeline
10
Approval: Incident Timeline
11
Perform root cause analysis
12
Issue an initial incident report
13
Approval: Initial Incident Report
14
Develop and implement corrective actions
15
Monitor the effectiveness of corrective actions
16
Update incident report with findings and actions taken
17
Approval: Updated Incident Report
18
Conduct a final review of incident and lessons learned
19
Approval: Final Review of Incident
20
Archive incident report and supporting documents
Identify the incident
This task involves identifying the incident that occurred. Determine the nature of the incident, such as an accident, security breach, or system failure. Understanding the incident will help guide the rest of the analysis process.
Record date, time and place of the incident
Record the exact date and time the incident occurred. Also, document the specific location where the incident took place, if applicable.
Identify the source/cause of the incident
Determine the root cause or source of the incident. This will provide insight into what led to the incident and help prevent its occurrence in the future.
1
Human error
2
Equipment failure
3
Software bug
4
External attack
5
Environmental factor
Document immediate action taken
Determine and record the extent of the damage
Approval: Damage Assessment
Will be submitted for approval:
Determine and record the extent of the damage
Will be submitted
Collect and review evidence
Gather and document witness statements
Prepare incident timeline
Approval: Incident Timeline
Will be submitted for approval:
Prepare incident timeline
Will be submitted
Perform root cause analysis
Issue an initial incident report
Approval: Initial Incident Report
Will be submitted for approval:
Issue an initial incident report
Will be submitted
Develop and implement corrective actions
Monitor the effectiveness of corrective actions
Update incident report with findings and actions taken
Approval: Updated Incident Report
Will be submitted for approval:
Update incident report with findings and actions taken
Will be submitted
Conduct a final review of incident and lessons learned
Approval: Final Review of Incident
Will be submitted for approval:
Conduct a final review of incident and lessons learned
