---
sourceDocument: Brazil IT Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-service-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Service Management

ft:clusterId :

    - itsm

bundleId :

    - itsm

workflow :

    - Technology


---

# Post Incident Report tab in the Major Incident workbench

# Post Incident Report tab in the Major Incident workbench {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
The Post Incident Report tab shows the cause of the major incident and the actions that teams took to resolve it.

The teams can assess the incident response and resolution process and determine follow-up action items. The post-incident report records the actions performed, the reasons for them, and the findings.  
Note:  
The major incident manager can edit a report when the incident is in the Resolved state.  
Figure 1. View of the Post Incident Report tab  
The post-incident report includes the following sections, where a major incident manager provides the required information:

* Overview: Summary of the incident.
* Findings: Information on what caused the major incident and any lessons learned in the process.
* Resolution: Steps taken to resolve the issue. The major incident manager can also add or edit related problem or change information by selecting Add or Manage, respectively.
* Timeline: Activity feeds of the incident and its related incident communication plans and incident communication tasks. You can update the timeline with the latest activity by selecting Regenerate Timeline.  
  Note:  
  The information that you provide for Overview, Findings, and Timeline is updated in the Post Incident Report section of the Incident form.
{#mi-workbench-pir-tab__ul_pfs_41g_hdb}

If you activate the Continual Improvement Management (CIM) plugin (com.sn_cim), the
Related Improvement Records section is displayed in the report. This section displays the
Inbound CIM Integrations records.

When you select View Complete Report, the information that the major incident manager entered is compiled, and you can download the report as a PDF file by selecting Download Report PDF.  
The following links appear in the Incident form under the Related Links section:

* Regenerate PIR Timeline: This link appears when the incident is in the Resolved state and the user has the major_incident_manager role.
* Preview PIR: This link appears when the incident is in the Resolved or Closed state and the user has the itil role.
{#mi-workbench-pir-tab__ul_h1k_kn4_vgb}  
Note:  
On the downloaded report, under Incident Response Timeline, the time displayed in the timing type Time to Identify is calculated in the following ways:

* If you propose the incident as a major incident: The time is measured from the first related alert. If no alert exists or the Event Management plugin is inactive, the time is measured from the incident creation. The end point is when the incident is first proposed as a major incident.
* If you create a major incident directly: The time is measured from the first related alert. If no alert exists or the Event Management plugin is inactive, the time is measured from the incident creation. The end point is when the incident is promoted to a major incident.
{#mi-workbench-pir-tab__ul_cqg_qwd_5gb}
**Related concepts**   

* [Summary tab in the Major Incident workbench](https://www.servicenow.com/docs/bmYzWmqNTHwVyFQGrhOeAA "The Summary tab displays information about records related to an incident in a card layout, including impacted services, affected configuration items (CIs), active outages, impacted locations, and child incidents.")
* [Communicate tab in the Major Incident workbench](https://www.servicenow.com/docs/9hTR8jshR~xQaVrx0Q9aAg "The Communicate tab helps you understand the progress of a communication plan and its related tasks.")
* [Collaborate tab in the Major Incident workbench](https://www.servicenow.com/docs/51inMqYEQzNx80b8P5kMqg "The Collaborate tab displays the communication tasks that use conference calls as their communication channel so you can view and manage them.")  
**Related tasks**   

* [Associate a new post-incident report](https://www.servicenow.com/docs/HT06V9Dx~ca2zurE47jddQ "Create your own post incident report and associate the UI page with the View Complete Report button under the Post Incident Report tab. Using the customized report, you can add information that is specific to your organization.")