SIIM Roadmap

After the initial response to an incident is over, organisations should ensure that a formal incident report is completed and stored in a reporting system. The report may require gathering additional information about the incident. Organisations should follow these reporting procedures:

• Use a simple incident reporting system to collect incident information
• Provide staff with easy-to-use templates and training to reduce underreporting
• Train staff on how to report incidents directly in the system or assign a designated staff member to enter reports into the system
• Explain clearly to staff what happens to incident information after a report has been entered into a reporting system
• Ensure confidentiality to protect those affected by the incident.

---

---