View Incident

Identification

Containment

Eradication

Recovery

Lessons Learned

3 of 14 completed · Click a task circle to cycle status

Identification 2 / 3 complete

Assess scope of exposed data and affected records

Completed Critical

Determine if PII/PHI/PCI data is involved

Completed Critical

Identify affected individuals and systems

In Progress High

Containment 1 / 3 complete

Revoke unauthorized access immediately

In Progress Critical

Preserve access logs for forensic analysis

Completed Critical

Notify legal counsel and privacy officer

Pending High

Eradication 0 / 2 complete

Close vulnerability or misconfiguration that enabled the breach

Pending Critical

Review and audit all access controls

Pending High

Recovery 0 / 3 complete

Notify affected individuals per legal requirements

Pending Critical

File regulatory notifications (GDPR 72hr, HIPAA, state laws)

Pending Critical

Offer credit monitoring to affected individuals if applicable

Pending Medium

Lessons Learned 0 / 3 complete

Review data handling and access control policies

Pending High

Conduct privacy impact assessment

Pending High

Document regulatory response and outcomes

Pending Medium