How does iGRCs support this work?
Capture and assess events
Record operational, cyber, privacy, safety or other incidents using relevant classifications and supporting information.
Investigate and coordinate action
Maintain evidence, record the response and assign actions to accountable people. Link the event to associated suppliers, risks and controls where relevant.
Learn and improve
Review causes and weaknesses, retain closure information and use the event history to inform future assessments.
What is the difference between an incident a breach and a near miss?
An incident is an event requiring attention. A breach involves failure to meet a requirement or obligation. A near miss reveals potential harm that did not fully materialise. The classifications and reporting consequences depend on the circumstances.
Which requirements are relevant?
Some events may create statutory, contractual or sector reporting duties. Accountable personnel must assess applicability and deadlines. Use the platform to retain the event record, evidence and actions supporting that assessment.
Frequently asked questions
Can one process cover different incident types?
The platform supports configurable records and assessments. Define the required classifications, responsibilities and response steps for the events in scope.
How are lessons connected to risk management?
Use linked risks, controls, evidence and actions to bring the response and improvement work into later reviews.
See iGRCs in action
Discuss your current process, the people involved and the evidence you need. We will demonstrate the relevant capabilities and explore an appropriate configuration.