# AI incident response plan

> For reference purposes only. Not legal advice. Draft for review by a qualified professional.

> How to use this template. Stages, roles, severity levels and notification steps for AI incidents. Replace every [placeholder], delete guidance notes and have a qualified professional review the result. Template version 1.0, last reviewed 2026-10-03. Certainty: simplified.

## Purpose and scope

Which systems and incidents the plan covers.

[Enter your text here]

## Definitions and severity

S1 serious harm or likely legal notification; S2 significant harm or many affected; S3 limited and contained; S4 near miss.

[Enter your text here]

## Roles

Incident lead, system owner, legal, privacy, security, communications: [names].

[Enter your text here]

## Stages

Detect, triage, contain, assess, notify, fix, learn, with a checklist for each.

[Enter your text here]

## Notification

Internal escalation, vendor and customer notices, and possible authority notifications. Confirm each with counsel.

[Enter your text here]

## After the incident

Blameless review, actions and plan updates.

[Enter your text here]

## Certainty notes

- Simplified: a general starting point. Rules differ by region.

> For reference purposes only. This site offers general guidance for learning and planning; it is not legal advice and creates no lawyer-client relationship. Rules change often, so check the primary sources and qualified counsel before you act.