Ransomware Incident Report
General Information
Date of Incident
Reported By
Department/Team
Incident Details
Date & Time Detected
Systems Affected
Description of Incident
Ransomware Name (if known)
Type of Data Affected
Impact Assessment
Number of Users Affected
Business Functions Impacted
Data Loss/Exfiltration Observed
Yes
No
Unknown
Other Impacts
Actions Taken
Immediate Response Steps
Systems Isolated?
Yes
No
Law Enforcement Notified?
Yes
No
External Parties Informed
Further Comments / Notes