Write an incident report with a provisional cause, impact, and next actions.
Prepare a reviewable incident report linked to the ticket.
Get an editable security incident report that separates known facts from provisional findings and links back to your incident ticket.
Build a reviewable timeline and provisional cause on the incident ticket.
Your incident lead gets a report draft on the ticket, with a clear timeline and stated customer impact.