← All Tools
Incident Report Generator
Write an incident report on the NIST SP 800-61r2 life cycle — with NIS2, DORA & GDPR notification types and deadlines. 100% client-side.
All data stays in your browser. Nothing is transmitted to any server. Safe for real incident data. The report follows the NIST SP 800-61r2 incident-handling structure; the regulatory deadlines are quoted from the legal texts — review and approve the report before submission to any authority.
Incident Identification required fields marked *
Detection & Analysis NIST phase 2
Affected Assets, Scope & Impact
Containment, Eradication & Recovery NIST phase 3
Post-Incident Activity NIST phase 4
Reporting Entity
Structure & reporting-deadline reference
NIST SP 800-61r2 life cycle
Preparation
Detection & Analysis
Containment, Eradication & Recovery
Post-Incident Activity
NIS2 (Art. 23)
24h Early warning to CSIRT
72h Detailed notification
1 month Final report with root cause
Significant incidents only
DORA (Art. 19) / GDPR (Art. 33-34)
DORA 4h initial, 72h intermediate, 1 month final
GDPR 72h to the supervisory authority
GDPR data-subject notice without undue delay (high risk)
Best practice
Document everything from minute one
Preserve evidence before remediation
Update reports as new facts emerge