Incident FAQs
How are incident reference numbers generated? Incident
Incident reference numbers are generated automatically. They begin with INC, followed by the calendar year, month, date and a unique reference number.
How is ownership assigned for a new incident, and can it be changed? Incident
When you create an incident, you are automatically assigned as its Owner. The Owner cannot be changed.
What is the purpose of the screening outcome in the background step of incident management? Incident
The Screening Outcome determines whether the incident needs a full assessment.
Use the information recorded during screening to decide whether further investigation or action is required.
What options are available for the screening outcome question in the background step of incident management, and what do they mean? Incident
The Screening Outcome has three options:
- Yes : A full incident assessment is required. The remaining assessment steps become available.
- No: A full incident assessment is not required. Additional fields are provided to record the reason and, where needed, a follow-up review.
- Don’t Know: Is not yet enough information to decide. Additional fields are provided so the incident can be reviewed again.
Does the screening outcome affect which parts of the incident form are accessible? Incident
Yes. If you select No or Don’t Know, later assessment steps remain unavailable. Selecting Yes makes the remaining assessment steps available.
Who can delete an incident? Incident
Only the incident Owner and your organisation’s 9ine Platform Administrators can delete an incident.
Other incident roles can view and edit the incident where they have access, but they cannot delete it. Deleting an incident also deletes its associated risks, issues, lessons and tasks.
What happens to associated risks, issues, lessons and tasks when I close or delete an incident? Incident
Closing an incident also closes its associated risks, issues, lessons and tasks. Deleting the incident deletes them.
If you reopen a closed incident, its associated items are restored: tasks return to Not Started, while risks, issues and lessons return to Open.
How do I see only the incidents I am responsible for? Incident
Turn on My Incidents in the Incident Log. It filters the log to incidents where you are the Owner, Member, Notified User, Data Protection Lead or IT Lead.
When does the Security & Systems investigation step appear? Incident
The Security & Systems investigation step (step 2a) appears only when Incident Classification is set to Security & Systems or Both. It is intended to be completed by the IT Lead.
How is an incident’s risk score calculated? Incident
The 9ine Platform calculates the risk score automatically by multiplying the Impact value by the Likelihood value selected in Risk & Impact. You do not enter the score manually.
Who can access an incident, and how is access granted? Incident
Being granted access to Incident lets you create new incidents, but it does not give you access to every existing incident.
You can access an individual incident when you are assigned to it as its Owner, Member, Data Protection Lead, IT Lead, Screening Reviewer, Notified User or Attachment Reviewer, or when you own or are a member of an associated risk, issue, lesson or task.
If you need access to an incident you cannot find in the Incident Log, ask your organisation’s 9ine Platform Administrator to review your access.