Author a time-bound incident response playbook for a lost or stolen key (Incident [IncidentID]) detected at [DateTime] affecting [AffectedZones]. Include decision criteria for rekeying based on [MasterKeyLevel], immediate containment steps, access suspension, CCTV/log review, and notification requirements under [RegulatoryFramework]. Provide communication templates for staff, vendors, and authorities.
Output requirements:
Incident Timeline (table: T+minutes, Action, Role).
Decision Tree (text-based) for rekey/monitor/notify.
Impact Assessment (assets at risk, exposure window, compensating controls).
Containment & Eradication Steps (checklist).
Recovery & Verification (tests, signoffs).
Post-Incident Report Template (sections and required evidence).