
126 SOFTWARE QUALITY ASSURANCE
e IRT should maintain records about the status of incidents,
along with other pertinent information. e issue tracking system
should contain information on the following:
e IRT should precaution incident data and restrict access to it,
only authorized personnel should have access to the incident data-
base. Incident communications (e.g., e-mails) and documents should
be encrypted or otherwise protected so that only authorized personnel
can read them.*
Incident Classication
When an incident happens, either small or big, even if it seems simple,
it should be documented and reported immediately. And the incident
mana ...