Once an Admin has opened a critical incident, it can then be updated in real time with priority rating changing according to circumstance.

To open an incident:

1. Navigate to the Incident Manager module and click the  icon on the left to create a new incident.
2. Select the required environment from the drop-down list. Then click Open. The incident is created.
3. At the top of the screen, where it says New Incident, click and add in the name of the Incident. For example, Rogue Attack.
4. Click Edit and add in the Incident description. For example, Hacker attempted to infiltrate system.
5. Choose the Severity Score- from 0 to 100 – where 100 is the highest level. Note that you can (and should) change the Severity Score throughout the investigation, containment and action phases. A graph will display on the Dashboard showing the changes in Severity Score over time.
6. In the Critical Impacts section, add in all the possible ways this incident will impact on the company – both actual and potential.
7. In the Risks section, add in all the potential hazards i.e. what else could happen?
8. Under the What are we doing heading, summarize the Main Strategy your company is taking to handle this crisis.
9. Add in status updates from all the relevant departments (you will take and summarize these updates from the Workstation once people start to work on the Incident).
10. In the Intelligence section, select the type of Incident: Attack or Failure (where failure indicates a problem with the company’s infrastructure).
11. Select the range: Unknown, Targeted (aimed at specific individuals in the company), or Wide (ie global company attack).
12. Write down the motivation for the attack (as far as you can tell).
13. Add information that you have so far about the case.
14. Add all the information that you are still missing and hoping to acquire.
15. Click Save when done.

To close an Incident:

1. From the top right of the screen, click
2. Select Close Incident.
3. Add in a comment in the Close Incident dialog box and click Save.