Incident Report Numbering

SOVA offers flexibility in how you number your incident reports. While it might not be possible to create a numbering system that is exactly what you currently use, especially if you have a very complex system, you should be able to get pretty close.

Here is how you do it.

Navigate to Settings > IR Numbering. The screen below appears:

IR numbering has three different parts:

Prefix - can be a series or letters, numbers, or date as MM-DD-YYYY
Incrementing Value - can be a 3 or 4 digit number. The number you set here will be used for the next IR you accept
Suffix - can be a series or letters, numbers, or date as MM-DD-YYYY

Using the screenshot above, this will produce an incident report numbered like 17-145-07-12-2017 since today is the 12th day of July as I'm writing this. This particular client likes to set their numbering with the 2 digit year, the incrementing value for the IR, then the date. Since the date created is already stored in the IR, you might consider the more common numbering scheme 17-145 by removing the checkmark in the "Suffix" portion above. That's a lot easier to reference in emails, calls to your security team, etc.

TIP: Remember, numbers are not issued to incident reports until the IR is accepted. This maintains a clean sequence of numbers and avoids gaps.