# AI Agent Incident Response Runbook and Report Template

> Source: https://netray.co/tools/ai-agent-incident-response-runbook-template
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

A fill-in incident report for AI agent mistakes in the ERP: timeline, containment, root cause, data affected and corrective actions.

## Category

compliance-legal

## Audience

- IT security
- ERP administrator
- Operations manager

## Tool

**Kind:** template

**Output:** document

**Fields:**

#### Company

**Key:** company

**Type:** text

**Default:** Acme Precision Ltd

#### Incident ID

**Key:** incident_id

**Type:** text

**Default:** AI-2026-004

#### Date reported

**Key:** reported

**Type:** date

**Default:** 2026-11-03

#### Reported by

**Key:** reporter

**Type:** text

**Default:** S. Okafor, Planning

#### Agent or tool involved

**Key:** agent

**Type:** text

**Default:** update_promise_date via purchasing-assistant-mcp

#### Severity

**Key:** severity

**Type:** select

**Options:**

- Low
- Medium
- High
- Critical

**Default:** Medium

#### Incident type

**Key:** type

**Type:** select

**Options:**

- Wrong data written
- Data exposed to wrong user
- Unapproved action
- Wrong answer acted upon
- Service misuse

**Default:** Wrong data written

#### What happened

**Key:** summary

**Type:** textarea

**Default:** Promise dates on 14 purchase order lines were moved out by 7 days after a vague request.

#### Records and data affected

**Key:** affected

**Type:** textarea

**Default:** 14 PO lines for 3 vendors. No financial postings affected.

#### Containment taken

**Key:** containment

**Type:** textarea

**Default:** Write tool disabled at 10:20. Dates restored from audit log before planning run.

#### Root cause

**Key:** cause

**Type:** textarea

**Default:** Tool accepted a bulk update without a record cap. Prompt did not require confirmation of scope.

**Blocks:**

#### AI Agent Incident Report

**Body:** Company: {{company}}
Incident ID: {{incident_id}}
Reported: {{reported}} by {{reporter}}
Severity: {{severity}}
Type: {{type}}

#### Agent and tool

**Body:** {{agent}}

#### What happened

**Body:** {{summary}}

#### Impact

**Body:** {{affected}}

#### Containment

**Body:** {{containment}}

#### Root cause

**Body:** {{cause}}

#### Response checklist

**Table:**

**Columns:**

- Step
- Time
- Owner
- Done

**Rows:**

**0:** Disable affected tool or revoke service account

**0:** Preserve logs, prompts and tool arguments

**0:** Identify and list affected records

**0:** Restore or correct data with approval

**0:** Notify data owner and, if required, regulators or customers

**0:** Add the case to the evaluation test set

#### Corrective actions

**Table:**

**Columns:**

- Action
- Owner
- Due date
- Status

**Rows:**

#### Approvals

**Signatures:**

- Incident owner
- Data owner
- Security
- Management

**Notes:** A starting point to adapt to your own incident process, not legal advice. Notification duties for personal data or regulated records depend on your jurisdiction and contracts, so check them with your counsel or compliance team.

## Content

**Intro:** Sooner or later an agent will move the wrong date, answer from the wrong record or show someone data they should not see. The first hour goes better if the report and the steps already exist. This template gives you both.

**Sections:**

#### How to use the template

**Body:** Open it the moment an incident is reported. Fill in the agent and tool, a plain description of what happened and the records affected. Record what you did to contain it and when. Work through the response checklist in order, then write the root cause and corrective actions once the facts are known. Export to PDF or Word for the record and share with the data owner and security.

#### Containment first

**Body:** The fastest containment for an agent is to disable the single tool or revoke the service account, not to switch off everything. That is why a per-tool register and a separate account for write paths matter. Preserve evidence before you change anything: the prompt, the tool arguments, the generated query and the ERP transaction log. Then restore data from the audit trail with the same approval you would require for a normal correction.

**Bullets:**

- Disable the tool, not the whole service, where possible
- Preserve logs before restarting anything
- Restore using the recorded before values

#### Root cause categories

**Body:** Most agent incidents fall into a few causes: a tool with too much reach, a prompt or description that did not require confirmation, an ambiguous user request the agent resolved by guessing, a data mapping error, or a role that granted more than intended. Write the cause at the system level so the corrective action changes a control, such as a record cap, a required confirmation or a narrower role, rather than blaming the model.

#### Common mistakes

**Body:** Teams often fix the single record and miss the pattern, fail to add the case to the test set so it can recur, or delay notifying the data owner while investigating. Review the corrective actions at an agreed date and close them formally. Keep the tone factual: the goal is a stronger control, not a person to blame.

**Cta:** Netray builds ERP agents with read-only defaults, visible queries and approval on write-back to keep incidents small. If you want a review of your controls, we can help.

**Faq:**

#### What counts as an AI agent incident?

**Answer:** Any unexpected write, exposure of data to someone not entitled to it, action taken without required approval, or business decision made on a wrong answer. Near misses are worth recording too.

#### How fast should we contain an incident?

**Answer:** As fast as you can safely disable the affected tool or account. Containment should come before root cause analysis, with logs preserved first.

#### Do we have to notify regulators or customers?

**Answer:** It depends on the data involved, your jurisdiction and your contracts. Personal data exposure often has legal timelines. Confirm with counsel or your compliance team and record the decision in the report.

#### Should incidents become test cases?

**Answer:** Yes. Add each incident as a case to your evaluation set so a future change that brings the failure back is caught before release.

## Search terms

ai agent incident report template, ai incident response plan template, llm incident runbook, ai agent wrong update erp, ai postmortem template, agent data exposure incident form, ai incident response checklist

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json