Incident Type Manager
LAST UPDATED: JULY 15, 2025
Overview
.png?inst-v=e416ef0a-975f-4240-8b76-b2350608028d)
The Incident Type Manager sub-module provides a centralized view and management console for all configured incident types within the system. It enables users to create, update, and remove incident types, as well as define the associated workspace and incident form each incident type should use.
Users can access the Incident Type Manager by navigating to the Configuration module, then selecting the Incident Type Manager sub-module.
Understanding the Role of Incident Types
Incident types categorize incidents to support consistent triage and investigation, based on the specific needs of each incident. By sorting incidents into types, users can tailor key components—such as dispositions, workspace layouts, and incident forms—to match the requirements and nature of each investigation.
.png?inst-v=e416ef0a-975f-4240-8b76-b2350608028d)
Adding an Incident Type
Users can add a new incident type in the following steps:
Click the + New Incident Type button.
Enter a name for the new incident type in the pop-up window, then click the Add button.
Configure the General Configuration, Incident Workspace, and Incident Form Builder.
General Configuration
Accessed from the General tab, these settings define the incident type’s name, description, available dispositions, and default playbooks preselected for manual incident creation.
Refer to Configuring an Incident Type: General Configuration for detailed information.
Incident Workspace
.png?inst-v=e416ef0a-975f-4240-8b76-b2350608028d)
Configured from the Incident Workspace tab, users can build and configure workspace layouts for each incident type using a drag-and-drop interface. Layouts should be tailored to specific groups and roles to ensure that the most relevant information and tools are shown to the appropriate users during an investigation.
Refer to Configuring an Incident Type: Incident Workspace for detailed information.
Incident Form Builder
.png?inst-v=e416ef0a-975f-4240-8b76-b2350608028d)
Accessed from the Incident Form Builder tab, this interface allows users to create forms for investigators to complete at various stages of an investigation. Forms can be assigned by incident type to ensure that investigators capture information relevant to each specific case.
Refer to Configuring an Incident Type: Incident Form Builder for detailed information.
Incident Type Manager Interface
The Incident Type Manager interface provides a centralized view and management console for all configured incident types in the system. It is comprised of four columns:
Incident Type Name: Displays a list of all available configured incident types.
Active Layouts: Indicates the number of layouts associated with each incident type.
Created On: Shows when the incident type was created.
Actions: Lists the available actions for each incident type, such as the trash icon used to delete the incident type from the system.
Users can sort the entries in ascending or descending order by clicking any column header (except for the Actions column). To modify an incident type, click its entry.
To quickly locate an incident type, users can enter a full or partial name into the search bar in the top-left corner of the interface.
