incidentoracle

{'type': 'object', 'required': ['incident_id'], 'properties': {'data_losses': {'type': 'boolean', 'description': 'Confidential/personal data affected?'}, 'incident_id': {'type': 'string'}, 'duration_hours': {'type': 'number'}, 'clients_affected': {'type': 'number', 'description': '% of clients affected'}, 'geographic_spread': {'type': 'integer', 'description': 'Number of EU member states'}, 'economic_impact_eur': {'type': 'number'}, 'criticality_of_services': {'type': 'boolean', 'description': 'Critical functions affected?'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['title'], 'properties': {'iocs': {'type': 'string'}, 'ttps': {'type': 'string'}, 'title': {'type': 'string'}, 'source': {'type': 'string'}, 'mitigation': {'type': 'string'}, 'description': {'type': 'string'}, 'threat_type': {'type': 'string'}, 'affected_systems': {'type': 'string'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {}, 'additionalProperties': False}

{'type': 'object', 'required': ['incident_id'], 'properties': {'incident_id': {'type': 'string'}, 'resolved_at': {'type': 'string'}, 'total_cost_eur': {'type': 'number'}, 'lessons_learned': {'type': 'string'}, 'recovery_actions': {'type': 'string'}, 'root_cause_final': {'type': 'string'}, 'preventive_measures': {'type': 'string'}, 'client_communication': {'type': 'string'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {}, 'additionalProperties': False}

{'type': 'object', 'properties': {'search': {'type': 'string'}, 'status': {'enum': ['detected', 'classified', 'notified', 'investigating', 'contained', 'resolved', 'closed'], 'type': 'string'}, 'severity': {'enum': ['critical', 'high', 'medium', 'low'], 'type': 'string'}, 'classification': {'enum': ['MAJOR', 'NON-MAJOR'], 'type': 'string'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {}, 'additionalProperties': False}

{'type': 'object', 'required': ['incident_id'], 'properties': {'authority': {'type': 'string', 'description': 'Competent authority (e.g., BaFin, FMA)'}, 'entity_lei': {'type': 'string'}, 'entity_name': {'type': 'string'}, 'incident_id': {'type': 'string'}, 'affected_states': {'type': 'string', 'description': 'Comma-separated EU member states'}, 'discovery_method': {'enum': ['internal_monitoring', 'user_report', 'third_party', 'regulator', 'other'], 'type': 'string'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['incident_id'], 'properties': {'root_cause': {'type': 'string'}, 'action_plan': {'type': 'string'}, 'incident_id': {'type': 'string'}, 'recovery_status': {'type': 'string'}, 'description_update': {'type': 'string'}, 'containment_actions': {'type': 'string'}, 'expected_resolution': {'type': 'string'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['title'], 'properties': {'team': {'type': 'string'}, 'notes': {'type': 'string'}, 'owner': {'type': 'string'}, 'title': {'type': 'string'}, 'severity': {'enum': ['critical', 'high', 'medium', 'low'], 'type': 'string'}, 'data_losses': {'type': 'boolean'}, 'description': {'type': 'string'}, 'detected_at': {'type': 'string', 'description': 'ISO datetime of detection'}, 'incident_id': {'type': 'string'}, 'bcm_activated': {'type': 'boolean'}, 'duration_hours': {'type': 'number'}, 'affected_systems': {'type': 'string'}, 'clients_affected': {'type': 'number', 'description': 'Percentage of clients affected'}, 'affected_services': {'type': 'string'}, 'geographic_spread': {'type': 'integer'}, 'economic_impact_eur': {'type': 'number'}, 'criticality_of_services': {'type': 'boolean'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'data_losses': {'type': 'boolean'}, 'duration_hours': {'type': 'number'}, 'clients_affected': {'type': 'number'}, 'geographic_spread': {'type': 'integer'}, 'economic_impact_eur': {'type': 'number'}, 'criticality_of_services': {'type': 'boolean'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['incident_id', 'new_classification'], 'properties': {'reason': {'type': 'string'}, 'incident_id': {'type': 'string'}, 'new_classification': {'enum': ['MAJOR', 'NON-MAJOR'], 'type': 'string'}}, 'additionalProperties': False}