Incident Management
Practical
By Samson Tanimawo, PhD
Published Jan 18, 2026
4 min read
Non-Incident Tickets: Don't Confuse Them With Incidents
Customer tickets aren't all incidents. The discipline that separates.
Live workflow · 3 working · 1 queuedLive
Signal · gather Working
Decide · pick action Working
Apply · with verify Working
Learn · update playbook Queued
Sort
Single user issue: ticket. Multiple users: investigate; possibly incident.
Pattern emerging: declare incident.
Escalate when
5+ similar tickets in 1 hour. Probably incident.
Trend over 24 hours. Possibly an incident class.
Avoid
Calling everything an incident. Devalues the term.
Ignoring multi-customer issues. Real incidents hide there.