Systems and methods for recording major incident response information

1. An automated system for recordation and retrieval of incident resolution action information, the system comprising:

a recordation data processing system having:

a recordation system data processor;

a recordation system network interface in communication with a network; and

a recordation system memory having stored therein a recordation application configured with instructions for the recordation system data processor to

receive a response action initiation instruction, the response action initiation instruction including action information identifying a current action taken in furtherance of resolving an incident on a target data processing system,

determine one or more responsible responders out of a group of responders, each of the group of responders having a responder data processor in communication with one another and an incident response manager processing system over the network, the responder data processor being configured for display of a real-time responder dashboard and for video and audio communication,

transmit a recordation instruction to the responder data processor of each responsible responder, the recordation instruction including an instruction to begin recording responder dashboard information, the responder dashboard information including at least a portion of the real-time responder dashboard display and video and audio communications of a responder data processing system,

receive a response action termination instruction identifying the current action, and

transmit a recordation termination instruction to the responder data processor of each responsible responder, the recordation termination instruction including an instruction to stop recording responder dashboard information; and

a data storage unit comprising a non-transitory storage medium and configured for receiving, from the responder data processors, real-time responder dashboard information recordings.

2. An automated system according to claim 1 wherein the real-time responder dashboard includes at least one of the set consisting of an incident description, incident time and status information, target system status information, responder action information, and responder communication information.

3. An automated system according to claim 2 wherein the incident time and status information includes a graphical representation of a timeline showing action initiation and resolution times.

4. An automated system according to claim 3 wherein the timeline includes projected future action initiation and resolution times.

5. An automated system according to claim 1 wherein the one or more responsible responders are determined based on information provided in the response action initiation instruction.

6. An automated system according to claim 1 wherein the one or more responsible responders are determined, at least in part, based on status and historical information for each of the group of responders and on historical actions.

7. An automated system according to claim 1 further comprising:

a recording retrieval data processing system having:

a retrieval system data processor;

a retrieval system network interface in communication with a network; and

a retrieval system memory having stored therein a recordation application configured with instructions for the retrieval system data processor to

receive, from a requesting processing system over the network, a request for historical incident response information, the request including identification of a requester and incident response information request criteria,

verify authorization of the requester to receive incident response information,

retrieve, from the data storage unit, responder dashboard information meeting the incident response information request criteria, and

transmit the relieved responder dashboard information to a requesting data processing system.

8. An automated system according to claim 7 wherein the incident response information request criteria identifies at least one of the set consisting of

information relating to actions taken to resolve an incident of a particular type,

information relating to one or more particular incident resolution action types,

information relating to incident resolution actions taken by a particular responder, and

information relating to actions taken by responders of a particular team.

9. An automated system according to claim 7 wherein the responder dashboard information meeting the incident response information request criteria includes a complete recording of real-time responder dashboard display and video and audio communications for at least one particular responder during a time interval of a particular action taken in furtherance of resolution of a previous incident.

10. An automated method for recordation and retrieval of incident resolution action information, the method comprising:

receiving, by a recordation data processing system over a network, a response action initiation notification from one of the set consisting of an incident response manager data processing system and an automated incident resolution system, the response action initiation notification including action information identifying, a current action taken in furtherance of resolving an incident on a target data processing system;

determining, by the recordation data processing system, one or more responsible responders out of a group of responders, each of the group of responders having a responder data processor in communication with one another and the incident response manager data processing system over the network, the responder data processor being configured for display of a real-time responder dashboard and for video and audio communication;

transmitting a recordation instruction to the responder data processor of each responsible responder, the recordation instruction including an instruction to begin real-time recording of responder dashboard information and to transmit recorded responder dashboard information to a data storage unit, the responder dashboard information including at least a portion of the real-time responder dashboard display and video and audio communications of a responder data processing system;

receiving a response action termination instruction from one of the set consisting of an incident response manager data processing system and an automated incident resolution system, the response action termination instruction identifying the current action; and

transmitting a recordation termination instruction to the responder data processor of each responsible responder, the recordation termination instruction including an instruction to stop real-time recording of the responder dashboard information.

11. An automated method according to claim 10 wherein the real-time responder dashboard includes at least one of the set consisting of an incident description, incident time and status information, target system status information, responder action information, and responder communication information.

12. An automated method according to claim 10 wherein the one or more responsible responders are determined based on information provided in an action initiation instruction.

13. An automated method according to claim 10 wherein the one or more responsible responders are determined, at least in part, based on status and historical information for each of the group of responders and on historical actions.

14. An automated method according to claim 10 further comprising:

receiving, by a recording retrieval data processing system from a requesting processing system over the network, a request for historical incident response information, the request including incident response information criteria,

retrieving, from the data storage unit, responder dashboard information meeting the incident response information criteria, and

transmitting the retrieved responder dashboard information to a requesting data processing system over the network.

15. An automated method according to claim 14 wherein the incident response information criteria identifies at least one of the set consisting of

information relating to actions taken to resolve an incident of a particular type,

information relating to one or more particular incident resolution action types,

information relating to incident resolution actions taken by a particular responder, and

information relating to actions taken by responders of a particular team.

16. An automated method according to claim 14 wherein the action of retrieving responder dashboard information includes

comparing the incident response information criteria to at least one of the set consisting of

incident time and status information included in recorded responder dashboard information displays,

responder action information included in recorded responder dashboard information displays, and

responder identification information in recorded responder dashboard information displays.

17. An automated method according to claim 14 wherein the responder dashboard information meeting the incident response information criteria includes a complete recording of real-time responder dashboard display and video and audio communications for at least one particular responder during a time interval of a particular action taken in furtherance of resolution of a previous incident.

18. An automated system for facilitating incident resolution, the system comprising:

a data storage unit comprising a non-transitory storage medium and having stored therein incident resolution information for a plurality of system incidents;

a plurality of responder data processing systems, each having

a responder data processor,

a network communication interface in communication with a network,

a responder user interface configured for presenting information to and receiving action information from a responding user, and for recording and displaying user telecommunication information, and

a responder memory having stored therein a dashboard application configured with instructions for the responder data processor to

receive incident response information from at least one of the set consisting of the responding user, other responder data processing systems, an incident response management processing system, and an incident resolution data processing system,

construct and continually update a set of responder dashboard information including at least a portion of the received incident response information,

display at least a portion of the responder dashboard information to the responding user via the responder user interface,

receive a recordation instruction to begin recording at least a portion of the responder dashboard information,

receive a recordation termination instruction to stop recording the at least a portion of the responder dashboard information, and

transmit, via the network to the data storage unit, the recorded responder dashboard information; and

an action recordation processing system having

a recordation system data processor,

a recordation system network interface in communication with the network, and

a recordation system memory having stored therein a recordation application configured with instructions for the recordation data processor to

receive action information from at least one of the set consisting of the incident response management processing system and the incident resolution data processing system,

determine whether the action information indicates a critical action is being initiated or has been resolved,

responsive to a determination that the critical action is being initiated,

determine one or more responsible responders associated with the critical action, and

transmit a recordation instruction to the responder data processing system associated with each responsible responder, the recordation instruction including an instruction to begin recording responder dashboard information, and

responsive to a determination that the current action has been resolved,

transmit a recordation termination instruction to the responder data processor of each responsible responder, the recordation termination instruction including an instruction to stop recording responder dashboard information.

19. An automated system according to claim 18 further comprising:

a recording retrieval data processing system having:

a retrieval system data processor;

a retrieval system network interface in communication with a network; and

a retrieval system memory having stored therein a recordation application configured with instructions for the retrieval system data processor to

receive, from a requesting processing system over the network, a request for historical incident response information, the request including identification of a requester and incident response information request criteria,

verify authorization of the requester to receive incident response information,

retrieve, from the data storage unit, responder dashboard information meeting the incident response information request criteria, and

transmit the retrieved responder dashboard information to the requesting data processing system.

20. An automated system according to claim 19 wherein the incident response information request criteria identifies at least one of the set consisting of information relating to actions taken to resolve an incident of a particular type, information relating to one or more particular incident resolution action types, information relating to incident resolution actions taken by a particular responder, and information relating to actions taken by responders of a particular team.