Viewing Incident Records

Incident Register

You can use the Incident Register to view a list of all incidents captured or recorded within the application. You can view various metadata on this screen, including the stage of the incident, the assigned user, and the deadline before which the incident workflow must be completed.

Incident Summary

The holistic view of the incident on the Summary tab allows organizations to manage an incident through a customizable, systematic workflow that includes stages for evaluation, investigation, remediation, and notification. The incident summary displays breach notification obligations from DataGuidance® Research intelligence and shows upcoming, overdue, and recently completed tasks as well as the overall status of each incident.

Incident Details

The Details tab shows relevant metadata about the incident including the type, assignee, and other details. The details on this screen can help manage the entire incident reponse process.

Assessments

The Assessments tab shows a list of the assessments associated with the incident. Assessments can be used to investigate, access, and manage incidents.

You can launch a new assessment or link to an existing one in the incident record. You can access each assessment by clicking on its name.

Tasks

The Tasks tab shows all tasks associated with the incident. Tasks can be automatically added when an incident reaches a specific workflow stage or can be manually added by clicking the Add Task button.

You can view the details of a task or change its status by clicking on the name of the task.

Jurisdictions

The Jurisdictions tab helps to visualize the regions and jurisdictions that are impacted by an incident. You can also view the impacted jurisdictions in a map view.

This information can be used to organize and manage notification requirements, which vary by jurisdiction.

To change the selected jurisdictions, click the Manage button. To launch a dynamic incident notification assessment (DINA), click the Assess Jurisdictions button.

Documents

You can use the Documents tab to attach supporting documentation to an incident or link to a hosted document online through a URL.

Comments

You can use the Comments tab to add comments to an incident to easily track changes and communicate with others working on an incident.

Activity

The Activity tab shows a history of the incident including changes made to the incident details, assessments conducted, tasks completed, stage changes, and related inventory records that have been added or removed from an incident.

This log shows the details of each action including the user who made the change and a time stamp.

Related

The Related tab shows the incidents, assets, processing activities, vendors, entities, and data elements related to the incident record.

Risks

The Risks tab shows the risk ID, description, score, and source of all risks related to the incident.

Incident Workflow

You can process incidents through the various stages of a workflow. As each stage is completed, the user can click the Advance button to continue along the workflow. This allows organizations to rapidly respond to incidents in an efficient manner compliant with data breach privacy laws. If you attempt to change to a stage without completing a required task, the Incomplete Required Task modal will appear. You will be unable to move forward until this task is completed.

You can also change the incident workflow and select the new stage in which the incident will appear. If you move to a non-final stage of a new workflow, all existing required tasks will be tied to the second to last stage on the new workflow. The Incomplete Required Task modal will appear if you attempt to move to the final incident stage without completing the required task. If you move to the final stage of a new workflow, you will see an error message. You are unable to enter the final stage of the workflow if there are required tasks open on the incident. To move forward, you must select a different stage.