
| Activity | Agency | Virtus Group | Vendor A | Vendor B |
|---|---|---|---|---|
| Incident triage (first 15 minutes) | [I] | [R] | [C] | [C] |
| Change planning and CAB | [A] | [R] | [C] | [C] |
| Backup restore drill | [C] | [R] | [A] | [C] |
| Time | Step | Owner | Evidence |
|---|---|---|---|
| 0 to 5 min | Open bridge, assign roles, declare severity | [SPOC] | [Ticket or war room link] |
| 5 to 10 min | Containment gates, safety and privacy checks | [Incident lead] | [Checklist] |
| 10 to 15 min | Tasks to vendors, timestamps started, comms plan agreed | [Comms lead] | [Notes] |