Policies and procedures for reporting IT incidents within the organization. Immediate reporting guidelines for extraordinary incidents. Specifications for defining incident levels and reporting requirements