You can associate and track the impact of any given issue using parent and child security incident relationships in Security Incident Response.

Using the Related Records tab, you can add a Parent security incident issue to any Security Incident Response form. This feature automatically makes the incident a child that appears in the Related Lists - Child Security Incidents tab of the parent issue.

Note: You cannot make an existing parent security incident its own child by using the same number for both incidents.
Adding a Parent security incident
Figure 1. Child Security Incident
Viewing a Child security incident

You can add one or more Child Security Incidents to any security incident record, as well, using the Edit button in the Child Security Incidents tab. In the following example, all three records are connected.

Figure 2. Grandparent, Parent, and Child security incidents
Viewing the grandparent, parent, and child security incidents
Note:
  • All work notes recorded in the parent are propagated to any active children in Activities under the Incident Details tab.
  • The Parent field is used to associate the security incident with a parent record, such as a major incident, problem, or change request, that is outside the Security Incident module. For grouping multiple security incidents to a main security incident, the Parent security incident field is used.

When a parent is closed or canceled, any active children are also closed or canceled. Any active Response Tasks on the child incidents are canceled. If there are no other open Tasks, the child incident is closed. When closed, the Post Incident Interview records the closure and the information found on the Closure Information tab is propagated from the parent to the children.

Figure 3. Close Child Response task
Child response task closed and post incident review updated