Incident Severity Calculator
Answer five questions to classify the incident (SEV-1 to SEV-4), get the right response track, and see whether regulatory notification needs a legal review.
⚠️ Informational guidance only. Always follow your organization's incident response plan and legal advice.
Classification
SEV-4
⚖️ Personal data or regulatory exposure indicated - open the notification review: many regimes (e.g. GDPR 72h, India DPDP "as soon as practicable", sectoral rules) require timely regulator and affected-party notification. Involve legal now.
Can you walk an interviewer through this incident?
CyberVerse AI runs incident-response mock interviews: containment, evidence, communication - graded out loud.
Practice IR with CyberVerse AI →