Incident Response
IT incident management from detection to resolution and review
Software/ITLead Time
53.35h
Cycle Time
3.35h
Wait Time
50.0h
PCE
6.3%
Stages
6
Bottleneck
Post-Incident Review
Value-Add vs Non-Value-Add
Value-Add (VA)
An activity is value-add if it meets all three criteria:
- The customer is willing to pay for it
- It transforms the product or service
- It is done right the first time
Examples: Assembly, diagnosis, treatment, coding, machining, testing
Non-Value-Add (NVA)
Activities that consume time or resources but don't add value from the customer's perspective:
- Waiting — queues, approvals, batching delays
- Transport — moving materials or information
- Motion — unnecessary movement of people
- Rework — correcting defects or errors
- Over-processing — doing more than required
Note: Some NVA is necessary (compliance, safety). Target unnecessary NVA first.
Process Timeline
Value-Add vs Non-Value-Add
Bottleneck Analysis
Stage Efficiency
| # | Stage | Cycle (h) | Wait (h) | VA | Resource | Defect % | Efficiency |
|---|---|---|---|---|---|---|---|
| 1 | Alert Detection | 0.1 | 0.25 | VA | Monitoring | 5.0% | 28.6% |
| 2 | Triage & Classification | 0.25 | 0.5 | VA | On-Call | 15.0% | 33.3% |
| 3 | Investigation | 1.0 | 0.5 | VA | Engineer | 10.0% | 66.7% |
| 4 | Remediation | 0.75 | 0.25 | VA | Engineer | 5.0% | 75.0% |
| 5 | Verification | 0.25 | 0.5 | VA | Engineer | 3.0% | 33.3% |
| 6 | Post-Incident Review | 1.0 | 48.0 | VA | Team | 0.0% | 2.0% |