Incident Response Timeline Builder
Build and track your incident response plan across 5 phases. Check off tasks as you work through a real incident, customize with your own notes, and export the complete timeline for documentation.
Overall Progress
0 of 28 tasks completed (0%)
1
Detection & Analysis
0–2 hours0/6 done
2
Containment
2–8 hours0/5 done
3
Eradication
4–24 hours0/5 done
4
Recovery
8–72 hours0/6 done
5
Post-Incident Activity
1–4 weeks0/6 done
Regulatory Notification Timelines
HIPAA
Notify by: 60 days
Notify: Affected individuals + HHS OCR
Penalty: Up to $1.5M per category/year
GDPR
Notify by: 72 hours
Notify: Supervisory authority + data subjects
Penalty: Up to €20M or 4% global revenue
State Laws (CA, NY, etc.)
Notify by: 72 hours – 60 days
Notify: State AG + affected residents
Penalty: $100–$500 per violation
PCI DSS
Notify by: As required by brand
Notify: Acquiring bank + card brands
Penalty: $5K–$100K/month + potential termination
Recommended Training
Incident Reporting for Employees
What to do right after a click, a loss, or a mistake
Your timeline is only as fast as the first report. This course teaches employees exactly what to do the moment something goes wrong.
Free to use this tool, no signup required. Training is billed per seat, annually.