Incident Manager
Incident Manager tracks incidents from report to closure with severity-based notifications, SLA escalation, and a workflow UI for runtime rule changes. Use it when you need a clear incident record, timed follow-up, and a shared view of what is still open.
Trusted by frontline teams 15 years of frontline software
Built for: It Operations · Facilities Management · Manufacturing · Healthcare · Logistics
Overview
Incident Manager is a custom app template for tracking operational incidents from first report through post-mortem and closure. It centers on one incident record type with title, description, severity, status, assignee, reporter, timestamps, impact, and root-cause fields, plus automation for P1 notifications, overdue escalation, and resolved-time updates.
Use this template when incidents need more than a shared spreadsheet: when someone must own each record, when severity should trigger immediate notification, and when aging items need timed reminders. The included Dashboard surfaces active incidents by severity, mean time to resolve, incident trends, current on-call status, and recent incidents so teams can see what needs attention without opening every record.
Do not use this template as a substitute for a full ITSM platform, a ticketing suite with asset management, or a broad case-management system. It is intentionally focused on a small incident workflow with list, detail, and form screens plus runtime-configurable rules. The built-in Workflows UI is useful when you need to tune escalation logic without rebuilding the app, but the template stays narrow enough to stay usable for frontline and back-office teams.
Standards & compliance context
- For regulated incident logging, keep timestamps, status changes, and notification history intact so the record supports audit review.
- If incidents may contain personal or sensitive data, restrict access by role and avoid exposing unnecessary details in list views.
- For safety or regulated operations, align severity and closure steps with your internal incident reporting policy and any applicable industry recordkeeping requirements.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
How to use this template
- Create the incident record type with the provided fields, status lifecycle, and severity options so every report follows the same structure.
- Assign role permissions so reporters can create incidents, assignees can update status and root cause, and managers can view or adjust workflow rules.
- Load the default automation rules for P1 notifications, 30-minute escalation checks, reporter updates on resolution, and automatic resolved_at stamping.
- Use the Incidents list to triage active work, open the detail screen for context, and update the form as the incident moves from Reported to Closed.
- Review the Dashboard and recent incidents after each major event to confirm the SLA behavior, notification routing, and post-mortem handoff.
- Refine the Workflows UI rules after the first few incidents so the escalation threshold, recipients, and status transitions match your operating process.
Best practices
- Keep the severity definitions short and operational so responders know exactly when an incident becomes P1-Critical.
- Require a clear impact field at creation time so the first responder understands business effect before triage begins.
- Photograph or attach evidence for physical incidents at the time of reporting, not after cleanup or repair.
- Use a single owner per incident to avoid split accountability when the status moves from Investigating to Mitigating.
- Set the escalation threshold to match your real response SLA, then review it after the first week of live use.
- Close incidents only after the post-mortem is complete and root_cause is filled in, so the record stays useful for trend review.
- Limit workflow edits to a small set of authorized roles so notification rules do not drift across teams.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What kinds of incidents does this template fit best?
This template fits operational incidents that need a clear record, ownership, and follow-up: service outages, safety events, equipment failures, access issues, and process breakdowns. It is designed around a single incident record type with severity, status, assignee, reporter, timestamps, and root-cause fields. If you need a lightweight incident log with escalation and closure tracking, it is a good fit. If you need a full ITSM suite, asset CMDB, or case management platform, this is too small for that scope.
How often does the escalation check run?
The default automation checks every 30 minutes for incidents stuck in Investigating for more than 2 hours. That cadence is meant to catch stalled work without creating constant noise. You can adjust the schedule or threshold in the Workflows UI if your SLA is tighter or looser. The key is to keep the reminder rule aligned with how quickly your team is expected to respond.
Who should run this template day to day?
Operations leads, incident managers, on-call engineers, or support coordinators usually own it. Reporters create the incident, assignees update status, and managers receive escalation notifications when items age past the threshold. The template also works well when a dispatcher or duty manager triages incoming incidents before assigning them. Role separation matters because not everyone should be able to change workflow rules.
Does this template support regulated incident records?
Yes, it can support regulated incident logging when you need a traceable record of what happened, who handled it, and when it was resolved. The status history, timestamps, and notification trail help with auditability and post-incident review. You should still confirm any sector-specific retention, privacy, and reporting requirements for your environment. If the incident involves sensitive personal data, limit access to only the roles that need it.
What are the most common setup mistakes?
The most common mistake is leaving severity definitions vague, which makes notifications inconsistent and weakens escalation decisions. Another is failing to assign an owner, so incidents sit in Investigating with no clear next step. Teams also forget to seed realistic sample incidents, which makes the dashboard look empty and harder to demo. Finally, people sometimes over-notify managers on every update instead of only on the events that matter.
Can I customize the statuses or workflow?
Yes, but the default lifecycle is already mapped for a practical incident flow: Reported, Investigating, Mitigating, Resolved, Post-Mortem, and Closed. If your process uses different handoffs, you can adjust the workflow in the Workflows UI while keeping the same core record fields. Be careful not to remove the resolved timestamp or escalation logic, because those are what make the template useful for follow-up and SLA tracking. Keep the status set small so the list view stays readable.
How does this compare with tracking incidents in spreadsheets?
A spreadsheet can list incidents, but it usually cannot enforce status transitions, trigger timed escalations, or notify the right people automatically. This template gives you a single source of truth with list, detail, and form screens plus workflow rules tied to record changes. That reduces missed follow-up and makes it easier to see what is active, overdue, or closed. It is especially useful once multiple people are updating the same incident log.
What integrations are most useful with this template?
The most useful integrations are notification channels such as email, chat, or internal alerts, because the template is built around event-driven updates. If your team already uses an on-call system, you can route P1 notifications to the right responders. You can also connect it to dashboards or reporting tools if you want incident trends outside the app. Keep the first rollout simple and only add integrations that support response speed or visibility.
How should we roll this out to a team?
Start with one team or one incident category so you can confirm the severity definitions, escalation threshold, and notification recipients. Seed a few realistic incidents, then test the full path from Reported to Closed before broad rollout. Make sure reporters know what information to include at creation time, especially description, impact, and severity. Once the workflow is stable, expand to other teams and refine the rules in the Workflows UI.
Related templates
Go deeper on the topic
-
Healthcare employee engagement ideas to reduce burnout, boost retention, and improve patient outcomes in your health system.
-
Boost healthcare employee engagement with proven ideas that reduce burnout, improve retention, and elevate patient care.
-
Hospital recognition programs boost staff morale, reduce turnover, and improve patient care for stronger healthcare outcomes.
-
See how automated credential checks, labor rules, and real-time coverage tracking give charge nurses a schedule they can trust before every shift.
Ready to use this template?
Get started with MangoApps and use Incident Manager with your team — pricing built for small business.