anchor: The database accounted for the number of information security incidents that had been reported, the types of incidents, and actions taken to resolve each incident, including disciplinary actions.
positive: The number and types of security incidents that had been reported, could be found in the database.
negative: What disciplinary actions were taken, are not stored in the database.