JPCERT/CC publishes an investigation report checklist for outsourcing security incident investigations(jpcert.or.jp)

- This is a checklist that helps the party requesting a security incident investigation and the party writing the report work to the same standard. JPCERT/CC, a Japanese incident response organization, published it on GitHub. - It was published on November 11, 2026. JPCERT/CC explained that as ransomware (an attack that encrypts files and demands money) and data leaks have increased, it has become common to outsource investigations to external specialist firms. - JPCERT/CC said it created this document because organizations experiencing an incident for the first time find it hard to judge whether an external investigation is appropriate and whether the incident can be closed. - JPCERT/CC advised using it when outsourcing, and during the report writing and review stages.