One possibly for a future road map. It would be good if Eramba had an incident portal that would allow for people to report incidents directly to Eramba. I see there being two options. Log in as yourself if you are happy to be named. This will automatically associate this as the reporter. Or log in as guest. This would allow for people to log incident anonymously one of the things we find very difficult to do in practice.
The actual page would have minimal information available other that the details of the incident they are reporting. The would not have access to the incident or risk profile section this would just be for the incident handler.
We would need to be able to create a notification system that notifies either a custom role or the CISO role when a new incident is reported.