“…A process, therefore, of restricting the potential disruption initiated by such an occurrence, followed by a return to normal business operation, is Incident Management. Business functions, employees, IT systems [2], information security [3], clients [4], or several essential business operations can be disrupted by an incident without existing effective Incident management [5]. In a process enriched event log dataset for incident management, data is collected from the Service Now platform's event or instance audit system.…”