Run a post incident review

After an incident alert has been marked as resolved, the Post Incident Review section appears on the Incident Alert form.

After an incident alert has been marked as resolved, the Post Incident Review section appears on the Incident Alert form, This allows the incident alert administrator to initiate a post incident review (PIR) meeting to review and learn from the issues that arose from the source event.

Fill in this section as appropriate, then use the View PIR Report related link to create the PIR report. This report can be circulated or printed for the PIR meeting.

Figure 1. Post incident review

The Source Incident Details section contains read-only information, taken from the source incident.

Fill in the Incident Alert Details fields as follows:

Table 1. Incident alert details
Field Description
Resolution code [Required] Whether the incident alert has been completed. Values can be Complete, Complete with Actions, or Not complete.
Resolution notes [Required] Any notes about the resolution of the incident alert. After a user enters information in the resolution notes and saves the record, both the Resolution notes and Resolution code are set to read-only.
Summary A summary of the incident alert.
Lessons learned Any lessons learned from the review process.

Use the View PIR Report related link to create a report that can be circulated or printed for the post incident review meeting.