Who: Authorised incident handler. Entry: Assurance > Incidents. Follow your organisation's emergency or incident-response process immediately when needed; entering a record is not an emergency notification.
- Record the incident title, severity, detection time, owner, factual description and whether personal information is involved. Limit sensitive details to what the record requires.
- Progress from Open to Triage, then Investigating or Contained using the offered actions. Record containment and follow-up evidence.
- Where personal information is involved, complete the serious-harm assessment field before resolving. The application enforces the presence of this assessment; it does not make the legal decision for you.
- Record notification fields only when the relevant notification has actually occurred. Selecting a checkbox does not send a notice to a regulator or affected person.
- Resolve once the work and evidence support resolution. An authorised closer closes the resolved record; use Reopen if further investigation is required.
Complete when: The status reflects the actual response, decisions are documented and unresolved actions have owners. Notification duties, timing and operational and safety decisions follow the organisation's current approved procedures and qualified advice.