| 6. Analysis |
| Attack Sources (e.g. IP address, port) | |
|---|
| IP address of affected system | |
|---|
| Physical Location of Affected System: | |
|---|
| Additional Analysis Information: |
7. Timeline
Date and time when first detected, discovered or reported:
Date and time when the incident first occurred:
Date and time when the incident was contained or services restored:
Date and time when Commonwealth “Determination of Breach Completed and Submitted”(If applicable)
Date and time when Affected Users Notified (If applicable)
Detailed incident timeline:
| 8. Remediation and Post-Incident Summary |
| Actions Taken to Identify Affected Resources or Systems | |
|---|
| Actions Taken to Remediate Incident | |
|---|
| Actions Taken to Prevent Future Incidents | |
|---|
| Does existing administrative controls need to be amended? | |
|---|