Incident Playback ReportWithin CommandCentre, all incident response activities are logged with date/time, responder name, action and comments for audit and post-mortem analysis.
Audit Tracking is a Playback Away
When CommandCentre is deployed during an incident or test, every action and activity is tracked and recorded in the background. When the situation is resolved (or the test is completed) and the CommandCentre incident is closed, all of those tracked events can be replayed in report form. This Incident Playback Report displays the entire chronology of the incident, from its initiation to its closure, showing each action, the time it occurred, and who took the action.
The Incident Playback Report can be extremely valuable for
- For use in post mortem review (since it represents the actual events as they occurred, not someone's recollection).
- To help catalogue lessons learned, for use in updating and improving the plans invoked (whether for a real incident or in a test situation).
- For regulatory review or audit evaluation. Because the Report cannot be edited, it represents the truth, displaying exactly what happened and when.
Tracking and reporting the course of an incident or test provides valuable information, information that is often overlooked, omitted or edited when post mortem reports are compiled from notes or recollection. The Incident Playback Report eliminates human errors and provides a true picture of what actually transpired.