Incident360 runs every incident from the first report to the lessons learnt: reported by anyone, worked through with playbooks and tasks, kept on a timeline nobody can change afterwards. When personal information is involved, it keeps the POPIA section 22 clock - the assessment, the Information Officer's decision, the notification to the Information Regulator and the letters to the people affected.
Start a free trial Free POPIA readiness check Watch how it works See the pricing Sign in to StreamSoft360
Incident360 is one of the fourteen components of StreamSoft360 - one sign-in, one workspace, one bill.
A walkthrough on the real pages, with captions. Jump straight to the part you need.
Take Incident360 on its own, or in a StreamSoft360 plan with the components that find what goes wrong. One price per workspace - everyone in it can report. Monthly in Rands, excluding VAT. No setup fee.
See every plan and component on the StreamSoft360 page, or talk to us.
From the workspace, or with a report link for staff without an account - on the intranet, in the security incident policy, on a poster.
Ready-made first steps for ransomware, phishing, account compromise, lost devices, misdirected email and more - each with the question to answer, editable and versioned.
Every step has a person and a due time, lands in their My work, and is ticked off with what they found.
Every report, decision, task and note in order - and nothing can be changed afterwards. A correction is a new entry.
Emails, screenshots and logs, fingerprinted on upload and never replaced - plus a snapshot of the Shield360 threat or device involved.
From when it was noticed, against your target - with reminders to the Information Officer half-way and when it's reached.
What personal information, how many people, the likely consequences - and the Information Officer's decision to notify or not, recorded with why.
Every field of the security-compromise notification ready to copy into the Regulator's eServices portal - then record the reference.
The four things section 22 says they must be told, from your assessment - merged for every person, sent from your own address.
Switch on the Cybercrimes Act, the financial sector's Joint Standard, GDPR or PCI DSS - each with its own deadline on every incident.
A threat the protection product couldn't clean, or an outbreak across devices, is suggested as an incident - or opened straight away if you prefer.
Practise a ransomware morning before it happens - planned, run like the real thing, and closed with what you learnt.
Turn a lesson into a Risk360 risk, a Govern360 policy review or a task - in one click.
How fast you triage, contain and close, notifications on time, exercises run - and a one-page quarterly summary for the board.
Live checks in Compliance360 for POPIA section 22, ISO 27001 A.5.24, NIST CSF Respond and Recover, CIS 17 and Joint Standard 2.
Only the people who run an incident see it. Your data in a database of its own, roles, compulsory two-step sign-in and a full audit trail.
Each one a list of first steps with owners, due times and the question to answer - change them to fit how you work.