# Malware Incident Communication Tracking Template

## Case Information
| Field | Details |
|-------|---------|
| Case ID | |
| Severity | P1/P2/P3/P4 |
| Malware Type | |
| Communication Lead | |

## Notification Tracker
| Stakeholder | Method | Time Sent | Acknowledged | By Whom |
|------------|--------|-----------|--------------|---------|
| CISO | Phone | | | |
| CEO | Phone | | | |
| Legal | Email | | | |
| IT Director | Slack | | | |
| Board | Email | | | |

## Update Log
| Update # | Time (UTC) | Type | Recipients | Summary |
|----------|------------|------|------------|---------|
| 1 | | Initial | | |
| 2 | | Status | | |

## Regulatory Notifications
| Regulation | Required | Deadline | Sent | Confirmed |
|-----------|----------|----------|------|-----------|
| GDPR (DPA) | | 72 hours | | |
| HIPAA (HHS) | | 60 days | | |
| State Breach | | Varies | | |
| SEC (8-K) | | 4 bus days | | |

## Customer Communication
- [ ] Notification drafted
- [ ] Legal review complete
- [ ] Executive approval
- [ ] Support resources ready
- [ ] Notification sent
- [ ] FAQ published

## Media Handling
- [ ] Holding statement prepared
- [ ] Spokesperson designated
- [ ] Media inquiry response approved
- [ ] Social media monitoring active

## Lessons Learned (Communication)
- What worked well:
- What needs improvement:
- Template updates needed:
