The Cross-Functional Incident Workbook

Map how one incident reaches every department it touches, before it happens for real

A single incident report rarely stays inside security. Within hours it touches HR, IT, Legal & Compliance, Risk & Insurance, Facilities & Operations, and Health & Safety. This workbook maps that reality into six worksheets and RACI grids you can fill out today, using what you already know about your own organization.

What’s inside

Six one-page worksheets, one for each department that ends up touching a physical security incident:

• Human Resources: workplace violence, misconduct, and behavioral concerns that become HR matters fast
• Information Technology: badge and system access revocation, lost credentials, deepfake and impersonation threats
• Legal & Compliance: liability exposure, co-employment boundaries, regulatory and litigation triggers
• Risk & Insurance: the incident data that prices coverage and defends staffing decisions
• Facilities & Operations: the maintenance and access work that quietly affects your security posture
• Health & Safety: the injuries, near misses, and reportable events with a regulatory clock already running

Each worksheet asks the same two questions: what does this department need to know in the first hour, and who owns telling them. Then a RACI grid forces the harder question, who’s Responsible, Accountable, Consulted, and Informed for each incident trigger.

What changes once you fill it out

Every incident touches a core group almost every time (security, HR, Legal, IT) and pulls in others depending on what actually happened (Facilities, Health & Safety, Risk). Most security leaders can feel that pattern instinctively. Few have ever put it on paper with the people it actually involves.

Sit down with your department heads and work through it together, and the gaps surface on their own: the blank Accountable column, the two departments who both assumed the other would make the call. Those are easier to find here than in the middle of an actual incident.

What you’ll walk away with

• A first-draft cross-functional incident communication plan, built entirely from your own org structure
• A clear list of which department owns which incident trigger, and where that ownership is currently undefined
• A working document to bring into your next security leadership meeting, or your next conversation with a department you don’t talk to often enough
• The starting structure for a crisis management team, if you don’t have one formalized yet, or a way to pressure-test the one you do

This workbook draws on our webinar “From Badge to Boardroom,” featuring Todd Kreisher, a 27-year Secret Service veteran and former automotive CSO, in conversation with Trackforce’s Jeff DiDomenico. Watch the on-demand webinar →