--draft – 

Define what is incident ? 

In ITIL terminology, an ‘incident’ is defined as an unplanned interruption to an IT service or reduction in the quality of an IT service or a failure of a CI that has not yet impacted an IT service (for example failure of one disk from a mirror set).

The purpose of incident management is to restore normal service operation as quickly as possible and minimize the adverse impact on business operations, thus ensuring that agreed levels of service quality are maintained.

A separate procedure, with shorter timescales and greater urgency, must be used for ‘major’ incidents.

• If SUNET NOC detects incident based on monitoring 
  • Opens incident in the status.io, and maintains it on a change or periodically (once a day)  
  • Tries to resolve incident, if not escalates to engineering
  • Engineering opens ticket in SA queue 
  • If engineering takes over, then engineering updates the status.io 
  • If engineering can not resolve, escalates to L3 support
  • if there is significant deterrence to service quality, service ops manager informs ??? SA programme manager or who ?