Guidelines for incident investigation:

· Provide an incident reporter, with statistics about repeating incidents, classified by hazards

· Provide a filter enabling browsing by key features and selecting incidents for investigation

· Provide a back tracking visualization means, such as in form of GANTT, which shows the concurrency of state transitions

· Provide an incident manager, enabling to record and back track the system changes implemented in order to prevent similar incidents.