BTIT incident response guidance describes how security, availability and service incidents are handled.
When to raise an incident
- A production service is down or severely degraded.
- There is suspected unauthorised access.
- Data may have been lost, exposed or corrupted.
- A security alert or abuse report requires urgent attention.
What to include
- Service or system affected.
- Impact and urgency.
- When the issue started.
- Relevant logs, screenshots or error messages.
- Any recent changes.