Skip to main content

Incident Status

Incident status types are the tabs listed at the top of the page, such as Open, Assigned, Closed - Valid Incidents, and Closed - Not Incidents.

You can expand an incident to set the status. The status options are displayed at the beginning of the incident flow. You can share, add comments, assign the incident to users or groups, close the incident, or move the incident back to an open status. You can also select multiple incidents at a time to set the status. All status changes are recorded as part of the incident flow.

Incidents can have the following statuses.

Open​

Open status indicates that no action has been taken yet. You can take the following actions on a open incident.

  • Share
  • Add Comment
  • Assign to
  • Close as a valid incident
  • Close as not an incident

You can move an incident back to Open from any other status. When an incident is moved back to "Open" the incident is unassigned and the "Assigned To" column for that incident is empty. The incident flow for the incident shows that the status was changed.

For example, when an incident is moved from "Closed" status to "Open", then the incident flow shows Reopened by admin@cyberhaven.com at 2022-12-13, 11:30 .

Assigned​

Open incidents can be moved to Assigned status. When you select the "Assign To" status you can select a user to whom the incidents will be assigned. The assigned user will receive an email notifying them that an incident was assigned for review. An assigned incident will no longer appear in the "Open" tab.

Click on the Assigned tab at the top of the page to view all the assigned incidents. The assigned user for each incident is displayed in the "Assigned To" column of the table.

You can take the following actions on an assigned incident.

  • Share
  • Add Comment
  • Re-assign to
  • Move to open
  • Close as a valid incident
  • Close as not an incident

Closed - Valid Incidents​

Any incident irrespective of its status can be moved to Closed - Valid Incidents by any user. This status confirms that the incident is valid. The assignee does not change even when a different user closes the incident. Although the action is recorded in the incident flow along with all the previous status changes on the incident.

Click on the Closed - Valid Incidents tab at the top of the page to view all the valid incidents that are closed.

You can take the following actions on an assigned incident.

  • Share
  • Add Comment
  • Move to open

Closed - Not Incidents​

Any incident irrespective of its status can be moved to Closed - Not Incidents by any user. This status indicates that the incident was invalid and requires a reason to be provided. The assignee does not change even when a different user closes the incident. Although the action is recorded in the incident flow along with all the previous status changes on the incident.

Click on the Closed - Not Incidents tab at the top of the page to view all the closed invalid incidents. You can take the following actions on an assigned incident.

  • Share
  • Add Comment
  • Move to open