Template No.: T247 Template Title: Post-Incident Review & Lessons Learned (Update SOPs / Templates / Controls)
THE HSWAGATA BUDDHA TOOTH RELIC PRESERVATION MUSEUM
FOR INTERNAL USE ONLY
Template No.: T247
Template Title: Post-Incident Review & Lessons Learned (Update SOPs / Templates / Controls)
Related Research Case IDs / Cluster: Cluster F – HGT Conflicts & Security (Cases 66–85)
Linked Templates / Policies: T226 (Overview), T227 (Chronology), T231 (Actions Tracker), T232 (Risk Sheet), T229 (Evidence Index), T236 (Security Incident), T237 (Emergency Plan), T244 (Media Fact-Check), T246 (Confidentiality Decision)
Date of form: ____ / ____ / ______
Prepared by / Role: _______________________
Office / Unit: ____________________________
Country / Location: _______________________
Confidentiality Level:
Internal only [ ] Restricted [ ] Sacred-Restricted / Sensitive [ ]
Use of this form (tick):
New case / action [ ] Follow-up [ ] Annual review [ ] Archive only [ ]
A) Incident / case details
Case ID: ___________________________
Incident type (tick): Conflict [ ] Security incident [ ] Threat/harassment [ ] Rumour/misinformation [ ] Emergency [ ] Other: ______
Linked forms (IDs):
T236 Incident Report ID: ___________________
T241 Threat Report ID (if any): _____________
T244 Media Log ID (if any): _________________
T243 Board Decision ID (if any): ____________
Event date range: From //______ to //______
Review meeting date: //______ Time: ______ Mode: In-person [ ] Online [ ] Hybrid [ ]
Review lead (role): _______________________
Note-taker (role): ________________________
Participants (roles only): ____________________________________________
B) Purpose of this review (simple)
Tick all that apply:
Learn and improve (not blame) [ ]
Prevent repeat incident [ ]
Improve safety and relic protection [ ]
Improve communication and verification [ ]
Update policies, training, and templates [ ]
C) Short incident summary (facts only, 6–10 lines)
What happened (simple words):
Outcome (tick): Resolved [ ] Partly resolved [ ] Still open [ ] Referred to authorities/legal [ ]
D) Timeline checkpoint (from T227)
Key timeline numbers used: ___________________________________________
Important dates/actions (3–6 bullets):
//______ : ________________________________________________
//______ : ________________________________________________
//______ : ________________________________________________
E) What went well (keep and repeat)
Tick and add notes:
Fast response [ ]
Calm communication [ ]
Good verification (no action from screenshots) [ ]
Good security control (locks/keys/crowd) [ ]
Good documentation (clear evidence IDs) [ ]
Good teamwork [ ]
Other: ______________________
Notes (3–6 lines):
F) What went wrong / gaps found (honest, not blame)
Tick and add notes:
Slow response / unclear roles [ ]
Poor record keeping / missing logs [ ]
Weak access control / key problems [ ]
Crowd control not ready [ ]
Confusing public message / rumour spread [ ]
Staff training gap [ ]
Maintenance/neglect issue (locks, doors, cases) [ ]
Verification steps not followed [ ]
Other: ______________________
Notes (3–8 lines):
G) Root causes (simple “why” analysis)
Main cause (choose one or write):
Procedure gap [ ] People/role confusion [ ] Equipment failure [ ] External pressure [ ] Misinformation [ ] Unknown [ ] Other: ______
“Why did it happen?” (write 5–10 lines):
Contributing factors (tick):
Staff shortage [ ] Poor handover [ ] Poor supervision [ ] Old locks/doors [ ]
No clear spokesperson [ ] High emotions [ ] Weak partner agreement [ ] Other: ______
H) Risk and impact review (update T232)
Risk level at start: Low [ ] Med [ ] High [ ] Critical [ ]
Risk level now: Low [ ] Med [ ] High [ ] Critical [ ]
Impact (tick):
People safety impact: None [ ] Low [ ] Med [ ] High [ ]
Relic safety impact: None [ ] Low [ ] Med [ ] High [ ]
Reputation impact: None [ ] Low [ ] Med [ ] High [ ]
Financial impact: None [ ] Low [ ] Med [ ] High [ ]
Staff stress impact: None [ ] Low [ ] Med [ ] High [ ]
Short notes:
I) Lessons learned (clear statements)
Write 3–8 lessons as simple sentences:
J) Improvements to implement (actions + owners)
(Every improvement must have an owner and due date. Also add to T231.)
| Improvement / fix | Owner (role) | Due date | Priority | Linked template/policy | Status |
|---|---|---|---|---|---|
| __________________________ | __________ | //____ | Low [ ] Med [ ] High [ ] | T231 [ ] T234 [ ] T239 [ ] T240 [ ] T233 [ ] Other: ___ | Not started [ ] In progress [ ] Done [ ] |
| __________________________ | __________ | //____ | Low [ ] Med [ ] High [ ] | T231 [ ] T234 [ ] T239 [ ] T240 [ ] T233 [ ] Other: ___ | Not started [ ] In progress [ ] Done [ ] |
| __________________________ | __________ | //____ | Low [ ] Med [ ] High [ ] | T231 [ ] T234 [ ] T239 [ ] T240 [ ] T233 [ ] Other: ___ | Not started [ ] In progress [ ] Done [ ] |
K) Policy / SOP / template updates (what must change)
Tick what must be updated:
Security SOP [ ]
Key & access control SOP [ ]
Visitor/VIP supervision SOP [ ]
Emergency plan [ ]
Media response SOP [ ]
Evidence handling SOP [ ]
Confidentiality rules [ ]
Training plan [ ]
Other: ______________________
List exact documents/templates to update (write IDs/names):
L) Training and drill needs
Training needed? Yes [ ] No [ ]
If Yes, tick:
Access control (keys) [ ] Incident reporting [ ] Calm communication [ ] Verification (anti-fake) [ ]
Crowd safety [ ] Emergency drill [ ] Conflict mediation basics [ ] Other: ______
Training date plan: //______ Trainer (role): __________________
Who must attend (roles): _____________________________________________
M) Communications review (if rumours/media were involved)
Was a rumour/news involved? Yes [ ] No [ ]
If Yes:
Was fact-check done (T244)? Yes [ ] No [ ]
Was spokesperson rule followed? Yes [ ] No [ ]
Did we share any sensitive details by mistake? Yes [ ] No [ ]
If any mistake, what to fix (3–6 lines):
N) Closure and follow-up
Review status: Complete [ ] Need second review [ ]
Next follow-up review date: //______
Follow-up owner (role): _______________________
Final note (2–4 lines):
O) Sign-off
Prepared by (Name): _________________________ Role: ___________________
Signature: _________________________________ Date: //______
Reviewed by Security Lead / Head (Name): _____________________________
Signature: _________________________________ Date: //______
Approved by Supervisor/Director/Board (Name): ________________________
Signature: _________________________________ Date: //______