The database accounted for the number of information security incidents that had been reported , the types of incidents , and actions taken to resolve each incident , including disciplinary actions .
The database also automatically collects information as the users access information and logs it for further reference .