AI Incident Response Playbook for CH

CH-specific obligations covered

The output is anchored on the regulations that apply to AI deployments in CH. The top frameworks cited:

• revFADP — Revised Federal Act on Data Protection (revFADP, SR 235.1), in force 1 September 2023legislation · In force

  Article 6 — Principles for data processing • Article 5(c) — Sensitive personal data (includes health, biometric data) • Article 21 — Automated individual decisions (right to request human review) • Article 22 — Data protection impact assessment

• Swiss MedDO — Swiss Medical Devices Ordinance (MedDO, SR 812.213)legislation · In force

  Healthcare — Switzerland uses mutual recognition with EU MDR/IVDR via MRA. Post-2024 CE marking is not automatically valid in Switzerland for new devices.

• FINMA Circular 2023/1 — Operational Risks and Resilience — Banks (RS 2023/1)regulatory_circular · In force

  FINMA-supervised institutions must identify, assess, and manage AI and ML model risks as part of their operational risk framework; maintain independent model validation processes; ensure board-level accountability for technology risks; and demonstrate adequate controls over AI systems used in credit decisions, trading, and customer-facing services.

• Federal Act on Financial Services (FinSA, SR 950.1)federal_legislation · In force

  Financial service providers using AI for client advisory, portfolio management, or investment recommendations must conduct a client suitability and appropriateness assessment, ensure AI-generated advice is explainable to clients, maintain adequate documentation of algorithmic decision logic, and provide clients with a key information document where required.

How the AI Incident Response Playbook approaches this

You describe your organisation, jurisdiction, industry, risk appetite, and the AI tools currently in use. The tool produces a complete, structured playbook tailored to those inputs — designed to be opened, classified, and acted upon during a real incident.

The Executive Summary Word document is a one-page sign-off artifact for board / leadership. The detailed Excel workbook is the working operational instrument: classify severity, work through the 6 steps, populate the live incident log, dispatch the right communications template per severity tier, collect evidence, conduct the post-incident RCA, and track corrective actions to closure. Both are AI-assisted drafting aids intended to accelerate review by qualified incident-response, data-protection, and sector-regulatory practitioners.

What you get

• ✓ Two artefacts, two jobs: Executive Summary (.docx) for board sign-off, Operational Workbook (.xlsx) for real-time use during an incident — same incident, same source of truth, no fragmentation.
• ✓ P1–P4 severity classification with sector-specific incident examples + risk-appetite-driven escalation thresholds — internally consistent across the matrix, the 6-step process, the comms templates, and the wallet card.
• ✓ 12 ready-to-use communications templates (4 severities × 3 audiences) — no scrambling for wording mid-incident.
• ✓ Live Dashboard with native radar (per-step completion) + doughnut (overall response readiness) that auto-refresh as you toggle Status cells in the 6-Step Response sheet — visual progress for incident commanders without re-generation.

Ready to generate?

$49 · one-time — answer a 6-question intake (including jurisdiction = CH), and download your tailored document immediately.

Also available framed for your sector → see industry-specific pages