Incident Reporter Assistant-Incident Reporting Tool

Example

The bot starts by asking for the report date and progresses through collecting detailed information about the reporter, the incident, and specific observations. This ensures all relevant information is captured systematically.

Scenario

When reporting a lost device containing sensitive information, the assistant would first collect the date and location of the incident, followed by specifics about the device and the data it contained.

Example

Depending on whether the reporter is an IT professional, a management member, or a regular employee, the questions are customized to gather information most relevant to their perspective and knowledge of the incident.

Scenario

An IT professional reporting unauthorized access to a server would receive more technical questions about network security measures and logs, whereas a regular employee might be asked about any suspicious emails or messages received.

Example

The assistant prompts for a comprehensive description of the incident, including what happened, how it was discovered, and the immediate actions taken.

Scenario

In the event of a phishing attack leading to a data breach, the reporter would be guided to describe the phishing email, how the breach was detected, and any initial containment measures implemented.