Serious Incident Register The serious incident register tracks every event assessed against the Article 3(49) criteria, regardless of whether it was ultimately determined to constitute a serious incident. Each entry records the event description, detection date, awareness date (as defined by Article 73), triage outcome (confirmed, ruled out, or under investigation), severity tier and reporting deadline, submission date and recipient authority, investigation status and findings, corrective actions taken, and closure date. The register demonstrates a functioning incident detection and assessment process. It provides an evidence base for trend analysis: recurring near-miss events may indicate a systemic weakness requiring proactive intervention. It protects the organisation in disputes about whether reporting obligations were met. The Legal and Regulatory Advisor advises on the application of legal professional privilege to the register. Factual operational data is separated from legal analysis. The register is established under the Legal and Regulatory Advisor’s authority, with a documented purpose of assessing legal reporting obligations, strengthening the privilege claim. Key outputs

• Every assessed event documented regardless of determination
• Near-miss trend analysis for proactive intervention
• Legal privilege considerations documented
• Module 12 AISDP evidence