Malware Incident Communication Tracking Template
Case Information
| Field |
Details |
| Case ID |
|
| Severity |
P1/P2/P3/P4 |
| Malware Type |
|
| Communication Lead |
|
Notification Tracker
| Stakeholder |
Method |
Time Sent |
Acknowledged |
By Whom |
| CISO |
Phone |
|
|
|
| CEO |
Phone |
|
|
|
| Legal |
Email |
|
|
|
| IT Director |
Slack |
|
|
|
| Board |
Email |
|
|
|
Update Log
| Update # |
Time (UTC) |
Type |
Recipients |
Summary |
| 1 |
|
Initial |
|
|
| 2 |
|
Status |
|
|
Regulatory Notifications
| Regulation |
Required |
Deadline |
Sent |
Confirmed |
| GDPR (DPA) |
|
72 hours |
|
|
| HIPAA (HHS) |
|
60 days |
|
|
| State Breach |
|
Varies |
|
|
| SEC (8-K) |
|
4 bus days |
|
|
Customer Communication
Media Handling
Lessons Learned (Communication)
- What worked well:
- What needs improvement:
- Template updates needed: