This video walks through creating a new incident and completing the incident assessment, from the initial screening to closure.

1. From the left-hand menu, select Incident Management, then Incident, and click New Incident.
2. Enter the incident title, the name of the person reporting the incident, their email address and telephone number.
   • Note: The incident title and reporter name are mandatory.
3. Choose Save and Close to return to the incident log, or Save and Add Details to go straight to the assessment form.
4. Complete the Background step (the preliminary screening) and indicate whether a full incident assessment is needed:
   • Yes – complete Completion Required By; Save and Exit becomes Save and Next, taking you through Investigation, Risk and Impact, and Outcome and Closure.
   • No – fill in the explanation, review required by, review status and next review date.
   • Don't Know – similar review-related fields appear.
   • Note: With No or Don't Know, the remaining steps stay disabled.
5. Check the top of the form for the incident title and a reference number prefixed with INC (including the date and a unique identifier), which cannot be edited.
   • Tip: Tooltips provide guidance throughout the form.
6. If the incident is classified as Security and Systems, or Both, complete the extra step 2A S&S investigation – usually done by the IT lead or IT team.
7. In the Investigation step, identify any third parties, such as data processors or vendors, and document processing responsibilities. Select data subjects and their personal or special category data; they appear as pills.
   • Tip: Use +Other to add an unlisted data subject type for your whole organisation; the Answered pill shows the total selected.
8. In Step 3: Risk and Impact, selecting Yes, No or Possible reveals sub-questions and comment fields; impact and likelihood combine to calculate a risk score automatically.
   • Tip: Click Overview for a visual summary of the risks; the same applies in the Communication section.
   • Finish the step by selecting an Assessment Decision and Proposed Action and indicating whether the Regulatory Authority has been informed.
9. In Step 4: Outcome and Closure, use +New to add a risk, issue, lesson or task – each is added to the Summary of Activities table.
   • Tip: Use additional notes and attachments to keep extra details in one place.
10. At the bottom of Outcome and Closure, record the Status, Closure Date, Approved By and Reason for Closure.
    • Note: Closure By is filled in automatically with the logged-in user and cannot be edited.