Preparing an incident notification workflow

A reporting clock is difficult to manage without clear triage, escalation and ownership before an incident happens.

Define a decision path

Set out who assesses whether an incident is significant and who authorises external notifications.

Capture facts early

Record awareness time, affected services, likely impact and the information still being verified.

Practise the handoffs

Run a tabletop exercise with operational, legal and communications teams. Verify the national reporting channel before relying on the workflow.

This general editorial guidance does not determine your organisation’s legal obligations. Review current official sources and national rules.

Official sources and context

Use these alongside the applicable national legislation and authority guidance. This page is general information and may not reflect every national measure or later amendment.