Incident Reporting Form

Compliance

Breach capture form with severity classification, impact assessment, and regulatory notification tracking for compliance incidents.

Medium 3 Critical Rules Demonstrated

Regulatory Context

Incident reporting must comply with breach notification requirements under GDPR Article 33, state privacy laws, and industry-specific regulations.

Critical Rules Demonstrated

Standard vs Enhanced Treatment

Standard

Medium Severity

Enhanced

Medium Severity

Live Example

New Incident Report

IR-2026-0048

Incident Details

Incident Title *

Date Discovered *

Detailed Description *

Classification

Incident Type *

Data Breach Unauthorized Access System Failure Policy Violation

Severity Level *

Impact Assessment

Records Affected

Data Types Involved

Names Email addresses Phone numbers

Regulatory Notifications Required

GDPR (72-hour notification) State Privacy Laws PCI DSS HIPAA

Response Actions

Incident detected and logged Jan 19, 14:32

Security team notified Jan 19, 14:35

Containment measures implemented In progress

Root cause analysis Pending

Regulatory notification Due: Jan 22 (72h)

Brand Rules Applied

COLOR-001: "Medium" severity uses Navy text on Citrus background, not white text
ICON-001: All icons use outlined style - calendar, alert, checkmark, clock icons
A11Y-001: Severity levels have text labels (Critical/High/Medium/Low) alongside visual indicators

Code Example

<!-- Severity selector with text labels - A11Y-001 -->
<button class="severity-option medium selected">
  <!-- Outlined icon - ICON-001 -->
  <svg fill="none" stroke="currentColor">...</svg>
  Medium
</button>

<style>
  .severity-option.medium.selected {
    /* Navy text on Citrus - COLOR-001 */
    background: rgba(171, 221, 101, 0.3);
    color: var(--as-navy);
    border-color: var(--as-citrus);
  }
</style>