You should look for security frameworks based on this law. A common example is SOC2; the compliance audit has you compiling documents and recording SLAs long before any security incident might require it. There are many open source tools that you can use to track compliance in the various frameworks on your own. One of them may have an update for this new law.