Skip to content

Incident Notes Template

summary:
timeline:
affected assets:
initial signal:
confirmed facts:
open questions:
containment:
recovery:
lessons learned:

Write for future you

Capture enough context that the note still makes sense one month later.