Security · November 14, 2026
JPCERT Releases Incident Investigation Checklist
JPCERT Coordination Center has published an "Incident Investigation Report Checklist" on November 11. This independent agency addresses security incidents such as cyber attacks and unauthorized access, providing support for domestic reporting, response, analysis of methods, and alerts.
With the rise of incidents related to ransomware attacks and information leaks, there has been an increasing trend of organizations outsourcing incident investigations to external companies. However, many companies are handling incidents for the first time and face difficulties in evaluating the appropriateness of external investigations and making decisions about incident resolution.
To address these challenges, JPCERT/CC has created a checklist aimed at ensuring that the victim organizations requesting investigations and the personnel responsible for drafting reports share a common understanding to facilitate smooth incident investigations. The checklist is accessible to anyone.
The checklist is available for both the organizations requesting investigations (users) and the organizations responsible for the incident investigations (reporters), distributed in HTML and Markdown formats. Additionally, a sample incident investigation report is also available in PDF format.