Recording Incident Notifications
Many incidents require you to notify supervisory authorities and affected individuals. Record who was notified, when, and the evidence on the incident.
Notifications are recorded in the Notification step of the incident. The platform does not count down or track statutory deadlines, such as the 72 hours in GDPR or the NIS2 reporting deadlines: you report to the authority as you always have, and the incident holds the record that you did. See Standard Incident Templates and Your Plan.
What You Can Record in the Incident Log
- Notification sent: Yes / No
- Date of notification
- Who was notified
- Copy of notification uploaded
That way the decision, the notification and the evidence sit together on the incident, ready when an auditor or the authority asks.