Free download1 sections · 2 min readBy Dezső Mező · Published .mdtemplateMarkdownai-securityincident-responserunbookllm-security
What to do in the first 10, 60, and 360 minutes when your AI system leaks, misbehaves, or is under attack. CC-BY.
Full incident runbook for AI systems · seven incident types (prompt injection, data leak, hallucination emergency, rate-limit abuse, model swap, jailbreak, oracle manipulation), T+10/T+60/T+360 minute response windows, communications templates for GDPR breach notification.
01What the file contains
- 7 incident types with response flow
- T+10 / T+60 / T+360 minute action items
- NAIH 72-hour breach notification email template
- Stakeholder alerting escalation matrix
- Blameless post-mortem template
What to take away
- 7 incident types with response flow
- T+10 / T+60 / T+360 minute action items
- NAIH 72-hour breach notification email template
- Stakeholder alerting escalation matrix
- Blameless post-mortem template
More from the lab
Browse all entries- AI security checklist 2026 · for production LLM systems
- Data Processing Agreement (DPA) template · Hungarian market
- EU AI Act readiness self-check 2026
- DORA operational resilience testing playbook
Want this looked at on your own system?Start a conversation
