Security Incidents
Review security incidents logged in your ISMS.
- Get
- Create
Basic fields
IDTitleCreated dateStatusDue dateAssigned owner
Extended detail fields
Returned when you ask about specifics, or say "give me full details".
Date/timeIncident typeIncident reasonConnected assetsPersonal data breach flagConnected data breachCritical incident flagUnauthorized data access flagRecurring incident flagEffects for the organizationUrgencyClient/stakeholder impact flagClient/stakeholder impact detailsData losses flagData losses detailsReputational impact flagReputational impact detailsService downtime flagService downtime detailsEconomic impact flagEconomic impact detailsGeographical spread flagGeographical spread detailsDeployed response plansLinked tasksAssociated risksOther incident response
Example queries
"List all reported security incidents"
"Which incidents are still open?"
"Who is handling our unresolved incidents?"
"Are there any critical incidents outstanding?"
"Show incidents reported this quarter"
"Give me full details on our most recent incident"
Advanced
Response schema
[
{
"id": "<integer>",
"created": "<datetime string>",
"title": "<string>",
"description": "<string | null>",
"due_date": "<date string | null>",
"status": {
"name": "<string>",
"type": "<string>"
},
"assigned_member": "<object | null>",
"detailed_data": [
{"title": "Date/time", "value": "<string>", "tag": "incident-template-type-date"},
{"title": "Incident type", "value": "<string>", "tag": "incident-template-type-type"},
{"title": "Incident reason", "value": "<string>", "tag": "incident-template-type-reason"},
{"title": "Connected assets", "value": "<string>", "tag": "incident-template-type-assets"},
{"title": "Was this also a personal data breach?", "value": "<string>", "tag": "incident-template-type-breachyesno"},
{"title": "Connected data breach", "value": "<string>", "tag": "incident-template-type-breach"},
{"title": "Was the incident critical?", "value": "<string>", "tag": "incident-template-effects-criticalyesno"},
{"title": "Was malicious unauthorized access to data identified?", "value": "<string>", "tag": "incident-template-effects-breachyesno"},
{"title": "Recurring incident?", "value": "<string>", "tag": "incident-template-effects-recurring"},
{"title": "Effects for the organization", "value": "<string>", "tag": "incident-template-effects-magnitude"},
{"title": "Urgency of fixing the incident", "value": "<string>", "tag": "incident-template-effects-urgency"},
{"title": "Severe impact on clients or other stakeholders", "value": "<string>", "tag": "incident-template-effects-usageyesno"},
{"title": "Details on client or transaction amounts", "value": "<string>", "tag": "incident-template-effects-usagetext"},
{"title": "Severe data losses", "value": "<string>", "tag": "incident-template-effects-ciayesno"},
{"title": "Details on data losses", "value": "<string>", "tag": "incident-template-effects-ciatext"},
{"title": "Severe reputational impact", "value": "<string>", "tag": "incident-template-effects-reputationyesno"},
{"title": "Details on reputational impact", "value": "<string>", "tag": "incident-template-effects-reputationtext"},
{"title": "Severe service downtime", "value": "<string>", "tag": "incident-template-effects-durationyesno"},
{"title": "Details on service downtime", "value": "<string>", "tag": "incident-template-effects-durationtext"},
{"title": "Severe economic impact", "value": "<string>", "tag": "incident-template-effects-financialyesno"},
{"title": "Details on economic impact", "value": "<string>", "tag": "incident-template-effects-financialtext"},
{"title": "Large geographical spread", "value": "<string>", "tag": "incident-template-effects-geoyesno"},
{"title": "Details on geographical spread", "value": "<string>", "tag": "incident-template-effects-geotext"},
{"title": "Deployed incident response plans", "value": "<string>", "tag": "incident-template-actions-plans"},
{"title": "Linked tasks", "value": "<string>", "tag": "incident-template-actions-measures"},
{"title": "Security risks associated with the incident", "value": "<string>", "tag": "incident-template-actions-risks"},
{"title": "Other incident response", "value": "<string>", "tag": "incident-template-actions-text"}
]
}
]
Ask your AI assistant to create a new security incident by describing what you need — just a title is enough to get started, or add a description for more context.
What you can provide
Title requiredDescription optional
Ways to create
✏️
Single item
Say the name and your assistant creates it immediately.
📋
With context
Include a description to pre-fill notes or purpose on the new item.
📊
From a spreadsheet
Drag in an Excel or CSV file listing names (and optionally descriptions) and ask your assistant to create them all.
Example prompts
"Create a new security incident called Phishing Email Campaign Detected"
"Add a security incident named Unauthorised Login Attempt — occurred yesterday"
"Create a security incident record for the malware detection last Monday"
"Here's our incident log [attach] — create a security incident for each entry"