Independent UK governance, risk & complianceOur editorial standards ↗Practical guidance. Accountable decisions.
GRC.ME.UKDisclaimer

Compliance working document

Incident assessment & response log

Record facts, timestamps, risk decisions and accountable escalation.

Version 1.0 · 1 November 2026Editorial template · adapt to your scope
Working notes stay in this page until you explicitly save or export them. Record evidence references rather than confidential or sensitive source documents. A template does not confirm compliance.

Complete each relevant field and record reasons for exclusions. Keep statutory deadlines separate from internal project targets.

Record dates, times, timezone, source and known uncertainty.
Keep factual observations separate from assumptions.
Record actions, decision-makers and evidence preservation.
Assess harm, affected parties and ongoing risk.
Identify applicable thresholds, deadlines, recipients and reasons; this tool sends nothing.
Track recovery, communication, approvals and outstanding work.
Record root cause, lessons, controls, retest and closure approval.

GRC.me.uk · Source-linked guidance at the guidance library · Read the disclaimer.