Templates

Incidentmall

Incident reporting is common across many industries, yet for some reason, people believe it has to be done in a specific way when it comes to data protection. That is not the case. The result of this mindset is that incidents go unreported, and a tool that could improve operations is ignored.

Here is a template I have based on the incident and near-miss report used by the union IF Metall. My guiding principles have been to keep it brief, simple, and—hopefully—useful.

Mall för Konsekvensbedömning

While looking for impact assessment templates, I realized there weren’t any good ones available. Most are either just a “checkbox exercise” (which doesn’t work when you need to think creatively and independently about risk) or they are long and convoluted—or a combination of both. So, here is my attempt at creating a concise, practical template.

For instance, SKR offers a long, complex template, but I can’t imagine it ever becoming popular. However, it did contain some good ideas, so I stripped away everything I considered unnecessary and came up with this template for you to use.

Remember that the impact assessment must be conducted for a specific “processing activity,” not for a system or a storage location.

Feel free to get in touch if you need help with how to use it!