Policy Breach Notification Form

Policy Breach Notification Form

This form documents the discovery or suspected occurrence of a breach of company policy, including potential unauthorized access, disclosure, loss or other compromise of information or systems. Completion of this form constitutes a formal notification required by company policy and applicable contractual and legal obligations.

Incident Reference:    Report Date:    Report Time:

Reporting Party

Incident Summary

Alleged Policy Violated:    Section/Clause:

Incident Details

Date Discovered:    Date Occurred (if known):    Location / System:

Confirmed Breach:    Suspected Breach:

Systems and Data Affected

Estimated Number of Records Affected:

Personal Identifiable Information (PII)    Financial Data    Health / Medical Data    Confidential Business Information    Other:

Containment and Remediation

Estimated Resolution Date:    Vendor / Third Party Involved:    If yes, Vendor Name:

Law Enforcement Notified:    Date Notified:    Agency Name:

Notifications

Number of Individuals Potentially Affected:

Regulatory Notice Required:    If yes, Regulator Notified:    Date Notified:

Assessment and Risk

Initial Risk Assessment (select one):   Low    Medium    High

Attachments

Certifications and Acknowledgments

By submitting this notification, the reporting party certifies that, to the best of their knowledge, the information provided is accurate and complete. The reporting party affirms that evidence has been preserved and that no data or devices relevant to the incident have been intentionally altered, deleted or destroyed except as required for containment. The reporting party acknowledges that disclosure of this form and its contents is restricted to personnel with a need to know and will be handled in accordance with company confidentiality policies and applicable law.

Evidence Preserved:    Access to Affected Systems Restricted:

Governing Law and Confidentiality

This Policy Breach Notification and any subsequent investigative or remedial actions shall be governed by the laws of the state identified below. The contents of this notification are confidential and may be subject to privilege; unauthorized disclosure is prohibited and may result in disciplinary action.

Governing State:

Entire Agreement: This form, together with any attached supporting documentation, constitutes the complete written notification of the incident for purposes of company policy and supersedes any prior verbal or written communications regarding this incident.

Sign Now