When an incident is unfolding, teams rarely have complete information. A cyber alert, lost device, supplier outage, failed change, or data issue can quickly raise questions about impact, escalation, and regulatory reporting.
Download ACA’s practical triage card to help your team establish the facts, bring the right people together, consider whether further regulatory assessment may be needed, record its reasoning, and set a reassessment point as the situation develops.
From 18 March 2027, FCA-regulated firms will need to assess operational incidents against new reporting thresholds. The card supports early internal triage and escalation. It does not determine whether an incident is reportable or replace a firm’s incident-management process or regulatory assessment.
The Triage Card Covers:
- Immediate actions and evidence preservation
- Participants for the first triage discussion
- Common cyber, data, AI-related change and third-party incident scenarios
- Decision recording and reassessment as facts change
-1.png)