The database accounted for the number of information security incidents that had been reported, the types of incidents, and actions taken to resolve each incident, including disciplinary actions.
The database also automatically collects information as the users access information and logs it for further reference.