Incident Severity Classification
Classify the incident to determine the appropriate response level and timeline.
Minor policy violations with minimal impact
- Student uses AI without citation
- Inappropriate prompt attempt
- Minor terms violation
Significant violations requiring intervention
- Repeated academic dishonesty
- Sharing inappropriate content
- Unauthorized data collection
Serious incidents with broad impact
- Data breach involving AI tools
- Systemic cheating ring
- Harassment via AI
- Deepfake of student/staff circulating within school
Emergency requiring immediate action
- Large-scale data exposure
- Legal/regulatory violation
- Threat to student safety
- Deepfake distributed publicly or used for extortion/harassment
48-Hour Response Timeline
Structured response protocol ensuring timely and effective incident management
Immediate Response
- Contain the incident
- Document initial details
- Notify response team
- Assess severity level
Investigation
- Gather evidence
- Interview involved parties
- Review system logs
- Determine scope
Assessment
- Complete investigation
- Identify root cause
- Assess full impact
- Develop action plan
Resolution
- Implement fixes
- Notify stakeholders
- Document lessons
- Update policies
š Incident Report Form
Incident Response Team
Key roles and responsibilities in the incident response process.
IT Director/CTO
Overall response coordination, external communication, final decisions
IT Security Manager
Technical investigation, system analysis, security measures
Assistant Superintendent
Academic integrity issues, student discipline, teacher support
District Counsel
Legal compliance, liability assessment, regulatory requirements
PR Director
Stakeholder messaging, media relations, crisis communication
Student Affairs Director
Student support, counseling coordination, parent liaison
Communication Templates
Ready-to-use templates for stakeholder communication during incidents.
ā ļø Customization Required: These templates contain placeholders like [Name], [Phone], [Email], and [Contact]. Replace all bracketed items with your district's actual information before use.