Skip to content

Security incident log

Keep a running record of security incidents: what was hit, how it was handled and who was told.

Fill it in and preview

Security incident log

Confidential. Do not put passwords, keys or full personal records in this log.

Organisation: Brightwater Analytics
Kept by: Hamza Idrissi, Security Lead
Period: Q1 2029

Incidents

Number Date and time found What happened Severity Action Status
SEC-007 9 Feb 2029 08:40 Phishing email, 3 staff clicked Medium 1 account reset, links blocked Closed
SEC-008 21 Feb 2029 17:15 Laptop lost on a train High Remote wipe done, device disabled Closed
SEC-009 2 Mar 2029 11:00 Customer file shared by link High Link removed, access log under review Open

Data and systems affected

SEC-008: encrypted laptop, no customer data stored locally.
SEC-009: 140 customer contact records, viewed from 3 unknown addresses.

Reports made

SEC-009: regulator told on 3 Mar 2029. Affected customers told on 5 Mar 2029.

Causes

SEC-007: no warning banner on outside email.
SEC-009: sharing links had no expiry.

Fixes and follow-up

Action Owner By when
Add an outside email banner Hamza Idrissi 15 Mar 2029
Set links to expire in 7 days Omar Khan 20 Mar 2029

Lessons

Staff reported the phishing email within 10 minutes. Reporting works.

Each incident is logged as soon as it is found. Serious ones also get a full post-incident review.

Templates are a careful starting point, not legal advice. Where the law matters, check what applies where you are.

IT and projects

What this template is for

A security incident log for phishing, malware, lost devices and data breaches. Record detection, severity, containment, data affected, reports made and lessons.

It is free to fill in online, needs no account, and downloads as a Word document or a PDF. See all IT and projects templates

IT and projects

What you fill in

The form asks for 9 details. The document fills itself in as you type.

  • Organisation

    For example: Brightwater Analytics

  • Log kept by

    For example: Hamza Idrissi, Security Lead

  • Period covered

    For example: Q1 2029

  • Incidents

    One row for each incident.

    For example: SEC-007 | 9 Feb 2029 08:40 | Phishing email, 3 staff clicked | Medium | 1 account reset, links blocked | Closed SEC-008 | 21 Feb 2029 17:15 | Laptop lost on a train | High | Remote wipe done, device disabled | Closed SEC-009 | 2 Mar 2029 11:00 | Customer file shared by link | High | Link removed, access log under review | Open

  • Data or systems affected

    For example: SEC-008: encrypted laptop, no customer data stored locally. SEC-009: 140 customer contact records, viewed from 3 unknown addresses.

  • Reports made (optional)optional

    Who was told, when and how: regulator, customers, insurer, police.

    For example: SEC-009: regulator told on 3 Mar 2029. Affected customers told on 5 Mar 2029.

  • Causes found (optional)optional

    For example: SEC-007: no warning banner on outside email. SEC-009: sharing links had no expiry.

  • Fixes and follow-up actions

    One row for each follow-up action.

    For example: Add an outside email banner | Hamza Idrissi | 15 Mar 2029 Set links to expire in 7 days | Omar Khan | 20 Mar 2029

  • Lessons (optional)optional

    For example: Staff reported the phishing email within 10 minutes. Reporting works.

IT and projects

What is inside

The parts of this document, in order.

  1. 1Incidents
  2. 2Data and systems affected
  3. 3Reports made
  4. 4Causes
  5. 5Fixes and follow-up
  6. 6Lessons

Templates

How it works

  1. 01

    Fill in

    Type your details in the form. The document fills itself in as you type; click any gap to jump to its field.

  2. 02

    Check

    Read it through. Gaps you have not filled stay marked, so nothing goes out half done.

  3. 03

    Download

    Save it as a Word document to edit further, or as a PDF to send or print.

Make it yours with AI

Open it in the chat and ask for changes: shorter, firmer, another situation, another language.

Adapt it with nerix

IT and projects

Questions people ask

What details does this template ask for?

The form asks for 9 details, starting with Organisation, Log kept by, Period covered, Incidents, Data or systems affected. 3 more are optional.

Can I download this template as Word or PDF?

Yes. When you have filled in the form, save it as a Word document to keep editing, or as a PDF to send or print. It is free and needs no account.

Is what I type sent anywhere?

No. What you type stays in your browser while you fill in the document. It only goes to nerix if you choose to open the template in the chat.

What should I check before I use this template?

Many places require a data breach to be reported to a regulator or to the people affected within a set time. Check the rules for the data and places involved, and keep the log free of passwords and secrets.

Are these IT and project templates free?

Most are. Fill in and download them for free as Word or PDF, with no account. A few longer documents are premium: free to fill in, paid once to download, and marked with their price.

Does a security policy make us secure?

No document does that alone. A policy helps when it matches what people really do, so keep it short, explain it to your team and review it every year.

Is a project charter only for large projects?

No. A small project benefits too, because one page that names the goal, the limits and the decision maker prevents most arguments later.