The database accounted for the number of information security incidents that had been reported, the types of incidents, and actions taken to resolve each incident, including disciplinary actions.
The number and types of security incidents that had been reported, could be found in the database.