Incident Management

At Kuali, we monitor our systems to ensure all services function according to our Service Level Agreement (SLA).  This document summarizes the process we follow when we become aware of an Urgent Incident impacting one or more of our services. The key purpose of the Incident Management process is to have timely, efficient communication in support of our goal to restore service as quickly as possible. This clearly defined approach aligns with our Incident Management Policy, which is regularly reviewed and audited as part of our annual SOC 2, Type 2 review.

• What is an Incident?
• What are the steps we take?
• What else?

What is an Incident?

• Any event that exposes customer data to unauthorized individuals.
• Any event that causes unexpected downtime to environments covered by our production SLA.
• Any event that Kuali categorizes as “Urgent” according to our SLA.

What are the steps we take?

• Assign an incident manager. This is typically a member of our Support team, but it could be anyone.
• Create a temporary place to communicate internally about the incident. We use Slack and Zoom for real-time internal discussions.
• Create an internal ticket for tracking the incident.
• Communicate internally and assign responsible individuals.
• Communicate to impacted customers. In the event of a data breach, extent and impact will be investigated and the communication will take place within 72 hours.
• Monitor progress and communicate every 30-60 minutes. Communication frequency may differ in the case of a data breach.
• Communicate internally and externally when an incident is resolved.
• Conduct an internal post-mortem. We review the incident timeline, conduct a root cause analysis, identify steps to improve our services, and plan work to address the root cause.
• Summarize post-mortem findings and communicate externally to customers.

What else?

• Depending on the type of incident, we may provide a customer bridge for real-time communication with customers.
• We follow this process when third-party vendors we rely on to provide our services have issues and will relay status updates to customers as we receive them.