Incident Response

IT incident management from detection to resolution and review

Software/IT
Sign Up to Use

Lead Time

53.35h

Cycle Time

3.35h

Wait Time

50.0h

PCE

6.3%

Stages

6

Bottleneck

Post-Incident Review

Value-Add vs Non-Value-Add

Value-Add (VA)

An activity is value-add if it meets all three criteria:

  • The customer is willing to pay for it
  • It transforms the product or service
  • It is done right the first time

Examples: Assembly, diagnosis, treatment, coding, machining, testing

Non-Value-Add (NVA)

Activities that consume time or resources but don't add value from the customer's perspective:

  • Waiting — queues, approvals, batching delays
  • Transport — moving materials or information
  • Motion — unnecessary movement of people
  • Rework — correcting defects or errors
  • Over-processing — doing more than required

Note: Some NVA is necessary (compliance, safety). Target unnecessary NVA first.

Process Timeline

Value-Add vs Non-Value-Add

Bottleneck Analysis

Stage Efficiency

# Stage Cycle (h) Wait (h) VA Resource Defect % Efficiency
1 Alert Detection 0.1 0.25 VA Monitoring 5.0% 28.6%
2 Triage & Classification 0.25 0.5 VA On-Call 15.0% 33.3%
3 Investigation 1.0 0.5 VA Engineer 10.0% 66.7%
4 Remediation 0.75 0.25 VA Engineer 5.0% 75.0%
5 Verification 0.25 0.5 VA Engineer 3.0% 33.3%
6 Post-Incident Review 1.0 48.0 VA Team 0.0% 2.0%