diff --git a/.github/ISSUE_TEMPLATE/helpdesk-issue.yml b/.github/ISSUE_TEMPLATE/helpdesk-issue.yaml
similarity index 100%
rename from .github/ISSUE_TEMPLATE/helpdesk-issue.yml
rename to .github/ISSUE_TEMPLATE/helpdesk-issue.yaml
diff --git a/.github/ISSUE_TEMPLATE/production-ssh-access.yaml b/.github/ISSUE_TEMPLATE/production-ssh-access.yaml
new file mode 100644
index 0000000000..fc03bd85a9
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/production-ssh-access.yaml
@@ -0,0 +1,38 @@
+name: Log of temporarily enabling production ssh access
+description: Used to record when and why we enabled ssh access to production.
+title: "[Production ssh access]: "
+labels: ["prodssh"]
+projects: ["GSA-TTS/11"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Use this only after production ssh access has been disabled again; do not create a ticket before that has happened.
+
+        Assign the people who were involved in the ssh access to this ticket.
+
+        Close the ticket after it’s created; this is for logging activity, not tracking work yet to be done.
+  - type: input
+    id: prodssh-start
+    attributes:
+      label: Start (UTC)
+      description: UTC timestamp for when production ssh was enabled
+      placeholder: 2023-10-11 19:14
+    validations:
+      required: true
+  - type: input
+    id: prodssh-end
+    attributes:
+      label: End (UTC)
+      description: UTC timestamp for when production ssh was disabled
+      placeholder: 2023-10-11 19:19
+    validations:
+      required: true
+  - type: textarea
+    id: explanation
+    attributes:
+      label: Explanation
+      description: Outline why access was enabled and what was done. Link to an issue if possible.
+      placeholder:
+    validations:
+      required: true