# Security Incident Log Template, Free Source: https://nerix.ai/templates/security-incident-log Keep a running record of security incidents: what was hit, how it was handled and who was told. Before you send it Many places require a data breach to be reported to a regulator or to the people affected within a set time. Check the rules for the data and places involved, and keep the log free of passwords and secrets. ## Fill it in and preview You are signed in. Fill it in your workspace and it is kept as a document you can send, share and have signed. [Open in your workspace](https://app.nerix.ai/documents/templates/security-incident-log) ### Security incident log **Confidential.** Do not put passwords, keys or full personal records in this log. **Organisation:** Brightwater Analytics **Kept by:** Hamza Idrissi, Security Lead **Period:** Q1 2029 ## Incidents | Number | Date and time found | What happened | Severity | Action | Status | | SEC-007 | 9 Feb 2029 08:40 | Phishing email, 3 staff clicked | Medium | 1 account reset, links blocked | Closed | | SEC-008 | 21 Feb 2029 17:15 | Laptop lost on a train | High | Remote wipe done, device disabled | Closed | | SEC-009 | 2 Mar 2029 11:00 | Customer file shared by link | High | Link removed, access log under review | Open | ## Data and systems affected SEC-008: encrypted laptop, no customer data stored locally. SEC-009: 140 customer contact records, viewed from 3 unknown addresses. ## Reports made SEC-009: regulator told on 3 Mar 2029. Affected customers told on 5 Mar 2029. ## Causes SEC-007: no warning banner on outside email. SEC-009: sharing links had no expiry. ## Fixes and follow-up | Action | Owner | By when | | Add an outside email banner | Hamza Idrissi | 15 Mar 2029 | | Set links to expire in 7 days | Omar Khan | 20 Mar 2029 | ## Lessons Staff reported the phishing email within 10 minutes. Reporting works. Each incident is logged as soon as it is found. Serious ones also get a full post-incident review. Templates are a careful starting point, not legal advice. Where the law matters, check what applies where you are. IT and projects ## What this template is for A security incident log for phishing, malware, lost devices and data breaches. Record detection, severity, containment, data affected, reports made and lessons. It is free to fill in online, needs no account, and downloads as a Word document or a PDF. [See all IT and projects templates](https://nerix.ai/templates/it-projects) IT and projects ## What you fill in The form asks for 9 details. The document fills itself in as you type. - ### Organisation For example: Brightwater Analytics - ### Log kept by For example: Hamza Idrissi, Security Lead - ### Period covered For example: Q1 2029 - ### Incidents One row for each incident. For example: SEC-007 | 9 Feb 2029 08:40 | Phishing email, 3 staff clicked | Medium | 1 account reset, links blocked | Closed SEC-008 | 21 Feb 2029 17:15 | Laptop lost on a train | High | Remote wipe done, device disabled | Closed SEC-009 | 2 Mar 2029 11:00 | Customer file shared by link | High | Link removed, access log under review | Open - ### Data or systems affected For example: SEC-008: encrypted laptop, no customer data stored locally. SEC-009: 140 customer contact records, viewed from 3 unknown addresses. - ### Reports made (optional) optional Who was told, when and how: regulator, customers, insurer, police. For example: SEC-009: regulator told on 3 Mar 2029. Affected customers told on 5 Mar 2029. - ### Causes found (optional) optional For example: SEC-007: no warning banner on outside email. SEC-009: sharing links had no expiry. - ### Fixes and follow-up actions One row for each follow-up action. For example: Add an outside email banner | Hamza Idrissi | 15 Mar 2029 Set links to expire in 7 days | Omar Khan | 20 Mar 2029 - ### Lessons (optional) optional For example: Staff reported the phishing email within 10 minutes. Reporting works. IT and projects ## What is inside The parts of this document, in order. - 1 Incidents - 2 Data and systems affected - 3 Reports made - 4 Causes - 5 Fixes and follow-up - 6 Lessons Templates ## How it works - 01 ### Fill in Type your details in the form. The document fills itself in as you type; click any gap to jump to its field. - 02 ### Check Read it through. Gaps you have not filled stay marked, so nothing goes out half done. - 03 ### Download Save it as a Word document to edit further, or as a PDF to send or print. ### Make it yours with AI Open it in the chat and ask for changes: shorter, firmer, another situation, another language. [Adapt it with nerix](https://nerix.ai/try?template=security-incident-log) ### Was this template helpful? IT and projects ## Questions people ask ### What details does this template ask for? The form asks for 9 details, starting with Organisation, Log kept by, Period covered, Incidents, Data or systems affected. 3 more are optional. ### Can I download this template as Word or PDF? Yes. When you have filled in the form, save it as a Word document to keep editing, or as a PDF to send or print. It is free and needs no account. ### Is what I type sent anywhere? No. What you type stays in your browser while you fill in the document. It only goes to nerix if you choose to open the template in the chat. ### What should I check before I use this template? Many places require a data breach to be reported to a regulator or to the people affected within a set time. Check the rules for the data and places involved, and keep the log free of passwords and secrets. ### Are these IT and project templates free? Most are. Fill in and download them for free as Word or PDF, with no account. A few longer documents are premium: free to fill in, paid once to download, and marked with their price. ### Does a security policy make us secure? No document does that alone. A policy helps when it matches what people really do, so keep it short, explain it to your team and review it every year. ### Is a project charter only for large projects? No. A small project benefits too, because one page that names the goal, the limits and the decision maker prevents most arguments later. Templates ## More in IT and projects - [API integration specification Specify how two systems connect: what data moves, how it is secured, how errors are handled and who owns it. IT and projects](https://nerix.ai/templates/api-integration-specification) - [Architecture decision record Record a technical decision with its context, options, reasons and consequences, for the team to find later. IT and projects](https://nerix.ai/templates/architecture-decision-record) - [Bring your own device policy Set the rules for using personal phones and laptops for work: security, privacy, support and leaving. IT and projects](https://nerix.ai/templates/byod-policy) - [Bug report Report a software problem so a developer can repeat it, judge its impact and fix it. IT and projects](https://nerix.ai/templates/bug-report) - [Change management plan Plan how people will be told, trained and supported through a big change, and how you will know it worked. IT and projects](https://nerix.ai/templates/change-management-plan) - [Change request Ask for a change to a project or system, show its impact and record whether it is approved. IT and projects](https://nerix.ai/templates/change-request) [See all IT and projects templates](https://nerix.ai/templates/it-projects) Templates ## More kinds of documents Every category has its own page, so you can see all of its templates at once. ## Use it in nerix ### Use it in nerix - [Templates](https://nerix.ai/product/templates) - [Long tasks](https://nerix.ai/product/tasks) - [Long documents](https://nerix.ai/product/long-documents) ### Learn more - [How to Make a Document From a Template](https://nerix.ai/help/make-a-document-from-a-template) - [IT and projects](https://nerix.ai/templates/it-projects)