APPENDIX 1: INFORMATION SECURITY INCIDENT REPORT
To be completed by the person reporting incident or the member of staff who
receives a verbal report by telephone.
Confidentiality notice
Information about actual and suspected information security incidents is confidential
and must be shared only with staff with designated responsibilities for managing
such incidents. Personal data must be shared on a need to know basis: only those
staff who need this information to deal with the incident and its consequences should
know the identity of individual/s involved.