View or Edit an Incident

Depending on your authorization for an incident, you can open a page to view its full details or to edit details.

If you're authorized at any level to work with an incident, you can open a view-only page that displays its details. Or, if you're an owner or editor of an incident, you can also open an edit version of that page. In it, you can set the incident's status, write comments, or add attachments.

Having opened the Results page specific to a control, click the Result ID value for one of the incidents it lists. This opens its view-only page. The Result ID column is available by default for transaction incidents. For access incidents, it's not available by default but you can click View > Columns to select it for display.

To open an incident in edit mode:

In the incident list, select the row representing an incident, then select the Edit icon, which looks like a pencil. This icon is active only if you select a single incident. (It's distinct from the Mass Edit button, which enables you to edit multiple incidents at once. A separate topic later in this chapter covers mass editing.)
Open the view-mode page for an incident, then click its Edit option.

In each of these pages:

Click the Security Assignment button to modify the assignments of users to the incident if you're an owner, or to view those assignments if you're an editor or viewer.
Review the control name and description, incident status, and any attachments to the incident in the header area of the page. In edit mode, you can assign a new status to the incident. If you then submit the incident, the new status may also change the incident state. In edit mode, you can also attach files to the incident.
Click a Result Attributes tab to view values for the attributes that characterize the incident. For a transaction incident, these are results attributes selected for the model that served as the source for the control that generated the incident. For an access incident, these identify an access point and a user it's assigned to. The access point presents risk either in itself or because it conflicts with other access points. You can't edit these values.
Click a Comments tab to display existing comments. When the page is in edit mode, you can add a comment.
Click a Definition tab to view a full record of the incident.
- In the Details panel, view details that define the incident. You can't edit these values.
- In the Result Perspective Assignment panel, view the current perspective assignments that apply to the incident. In edit mode, you can modify these values
- In the Worklist Assignment panel, view the person currently assigned to receive worklist notifications that apply to the incident. In edit mode, you can select another user or all eligible users.
- In the Related Records panel, view records of Process, Risk, and Control objects related to this incident. These relationships are indirect. The objects are actually related directly to the advanced control that generated the incident. Select Process, Risk, or Control to populate the grid with records of the type of object you've selected. You can't edit these records, nor modify the selection of objects at the incident level.
- If descriptive flexfield segments have been defined for the Incident Result object, these appear as fields in an Additional Information panel. You can view values selected for the incident or, in the edit-mode page, modify them.