The Incidents / Events module provides managers and responsible persons with an environment for the systematic recording, processing and evaluation of security events and incidents. It enables the course of an incident, its context and the information required for subsequent evaluation to be recorded.
WebArat uses its knowledge base, risk scenarios and links to other elements of the system, enabling incidents to be assessed in the context of assets, threats, vulnerabilities and security controls. The information obtained can subsequently serve as input to risk analysis and support the continuous improvement of the organisation’s security processes.
The module is not primarily intended for real-time operational incident response, but for the systematic recording, processing and evaluation of incidents. The process is managed by the Incident Manager, and the results remain part of the WebArat knowledge base, where they can be used to support future decision-making, assessments and the prevention of recurring incidents.