Continuous governance
Incidents
Record AI incidents, track regulatory notification deadlines, and connect the incident to the corrective actions and reassessments it causes.
- In the app
- Project → Decide & Operate → Incidents
Report an incident
- 1Choose Report Incident and record the AI System, type, severity and what happened.
- 2Types: Bias, Hallucination, Data breach, System failure, Unauthorised use, Harm to user and Other. Severity: Critical, Major, Minor or Near-miss.
- 3Record affected people and jurisdictions. Regulatory clocks track notification deadlines.
- 4Use Add Update as the incident moves through Open, Investigating, Contained, Resolved and Closed.
- 5Record the root cause (including a 5-whys analysis) and use Preserve incident evidence to place related evidence on hold.
Connect follow-up work
Link the incident to corrective actions and reassessment cases. Record any findings or risks it reveals separately in Findings and Risks. Incidents raised by runtime threshold breaches are created automatically.
Last reviewed 2 October 2026
Next stepAgent & MCP governanceDefine what an AI agent may do (tools, MCP servers, data, spend and human approval boundaries), check actions against that policy at runtime, and review redacted traces.