| 6. Analysis | |
| Attack Sources (e.g. IP address, port) | |
|---|---|
| IP address of affected system | |
| Physical Location of Affected System: | |
| Additional Analysis Information: | |
7. Timeline
Date and time when first detected, discovered or reported:
Date and time when the incident first occurred:
Date and time when the incident was contained or services restored:
Date and time when Commonwealth “Determination of Breach Completed and Submitted”(If applicable)
Date and time when Affected Users Notified (If applicable)
Detailed incident timeline:
| 8. Remediation and Post-Incident Summary | |
| Actions Taken to Identify Affected Resources or Systems | |
|---|---|
| Actions Taken to Remediate Incident | |
| Actions Taken to Prevent Future Incidents | |
| Does existing administrative controls need to be amended? | |