Incident response

Free Canadian small business workbook

AI Incident Response Playbook

A worksheet for responding when AI gives harmful advice, exposes data, misroutes work, or fails in production.

7 pages · PDF workbook · No email required

Actual working-record worksheet from the AI Incident Response Playbook, page 3 of 7.
Preview all 7 pages Read the complete workbook before downloading.
Preview the complete PDF All 7 pages · Free to explore

Scroll through the full workbook below. Download the PDF for selectable text, printing and your own working copy.

Workbook page 1 of 7. For selectable text, use the free PDF download.
Page 1 of 7
Workbook page 2 of 7. For selectable text, use the free PDF download.
Page 2 of 7
Workbook page 3 of 7. For selectable text, use the free PDF download.
Page 3 of 7
Workbook page 4 of 7. For selectable text, use the free PDF download.
Page 4 of 7
Workbook page 5 of 7. For selectable text, use the free PDF download.
Page 5 of 7
Workbook page 6 of 7. For selectable text, use the free PDF download.
Page 6 of 7
Workbook page 7 of 7. For selectable text, use the free PDF download.
Page 7 of 7

What’s inside

A working guide
for a real decision.

Define severity, containment, ownership, communication, fallback, evidence capture, and post-incident improvement for AI-supported operations. Use this guide to make the operating choice explicit, test it with evidence, and record who owns the next decision.

Who this is for

Production AI systems and customer-facing assistants.

Bring the people who own the work

Include the workflow owner, a person who performs the work, a reviewer with authority to approve or stop it, and the relevant data or tool owner.

Includes an explainer, working worksheet, three illustrative examples and practical considerations. This is a planning PDF, not prebuilt automation software.

Use it with your own work

Five questions
to work through.

Choose one workflow. Record enough context to support a decision, then use the worksheet to name the owner, evidence and next review.

  1. Detect

    Which signal shows the workflow is unsafe, degraded, or unavailable?

  2. Contain

    What must be paused, blocked, revoked, or routed to humans?

  3. Communicate

    Who needs to know internally or externally?

  4. Recover

    What fallback path restores operational continuity?

  5. Learn

    Which prompt, tool, policy, source, or review gate must change?

Illustrative examples from the workbook

Where this becomes practical.

Consulting Practice

Contain a cross-client disclosure

A generated brief includes information from a different engagement.

Independent Retailer

Correct a wrong customer reply

An assistant gives outdated refund information that a customer may rely on.

Accounting Practice

Respond to an unsupported figure

A draft summary cites a number that cannot be traced to the approved ledger.

AI-supported role
Surface the incident signal, affected outputs, source evidence, and a bounded containment checklist.
Human authority
The incident owner stops the workflow, assesses impact, communicates as required, and authorizes restart.
What to measure
Track time to detect, contain, correct, notify where required, and prevent recurrence.

Illustrative scenarios, not client results or a promise of performance. The workbook includes additional case-specific prompts.

A useful first step

Use the workbook.
Bring us the next question.

Download and use it without booking a call. If you want help applying it, email Chris with the workflow you’re considering and what you want to improve.

Discuss your workflow

Further reading in the library

General operational guidance only. These resources are not legal, privacy, cybersecurity or regulatory advice.