← Toolkit
TPL-103ChecklistOperational resilienceCyber resilience
Incident notification procedure
Decision chain, deadlines, templates for the three reports.
The procedure names who detects, who classifies and who notifies, with deputies, and recalls that the clock starts at classification. It includes the table cross-referencing every notification obligation applicable to one event.
How to use it
- Empower the classifier to decide alone
- Exercise the notification chain at least annually
- Classify on the best estimate, do not wait for certainty
Courses that use it
Related templates
TPL-050
Important business services register
Client-side phrasing, owner, tolerance, measured capability, gap.
TPL-051
Annual resilience self-assessment
The document the board approves and the supervisor requests.
TPL-052
End-to-end dependency map
Six layers, one row per dependency, sortable by substitutability.
TPL-053
Single point of failure register
Qualification, treatment or explicit acceptance, with review date.