How to Create a New Timeline Investigation

Who is this article for?

 Users who are investigating an event.

 Add Timeline permissions are required to perform these steps.

If you are using Coruson’s reporting module to manage your reports for event and incident management then timeline is a feature that can help investigate the more complex events. 

Timeline is best used when you have a series of events that have taken place; some that were caused by the main event, and other others that were the causes of the main event. These events are often referred to as a causal chain, but most people will refer to them as a “perfect storm.”

Example: Imagine a series of equipment concerns have been raised in the system. On their own they are not dangerous. However, when adverse weather conditions are added along with last minute staffing changes then all three events could lead to a major event occurring.

Coruson allows you to link all of these events together in a way that is logical and draws on your risk assessments in order to provide an all rounded view of the situation. 

This article focuses on how to use the Timeline feature from start to finish and does not include any information on setting up your risk assessments or your reporting module (please have a look at our other articles for that information). 

To make this easier to learn, the article is split into 9 sections. You can walk through them in sequence or you can jump to the section most relevant to what you are trying to achieve. 

1. Create a New Timeline
2. Add an Event
3. Link an Event to a Report
4. Link an Event to a Risk
5. Add a Consequence to a Risk Event
6. Add a Threat to a Risk Event
7. Classify the Event
8. Add Additional Information
9. Delete an Event
10. Further Reading

1. Create a New Timeline

Before you can add any events you must first create the blank timeline. Once the timeline has been created you can then add your first event.

How to do it:

1. Open the report record that you consider the ‘main’ occurrence.
2. Go to the Timeline tab.
3. Click the Add Timeline  button to create a new timeline.
4. When the timeline has been created you will then be presented with the option to add an event. Click Add Event  .
   
5. Give the event a name and enter the date.

Note: There is no right or wrong approach to naming your events. For best practice, your organisation should consider defining a naming convention.

2. Add an Event

Now that you have your timeline and event created you can begin adding additional events. These can be preceding events (i.e. events that took place leading up to this event) or they can be consequential events (i.e. events that happened as a result of this event). 

Note: There is no limit to the number of consequential events that can be added, however each event can only have one preceding event.

How to do it:

1. Click on the point you would like to add an event and then click the add icon  .
2. Set the type of event to Standard.
   
   
3. Give the event a name and enter the date.
4. Click Create.
5. Repeat this process to add as many preceding or reactionary events as needed.

Tip: You can move the events around the canvas to get a better look at the sequence. To do this, simply drag and drop the event using the icon at the top left hand corner of the event.

3. Link an Event to a Report

Once you have a series of events added to your timeline the next step is to link them to any existing reports you may have in Coruson. This allows you to have one, or even many, reports connected to the event. 

How to do it:

1. Click on the event you have created on the timeline.
2. Click on the Additional tab.
3. In the Associated Reports section search for the report number you are looking for.
4. Click the Add icon .
   
   
5. Repeat this process for as many reports as you need to add.

Added the wrong report? Don’t panic! You can always remove the report by clicking the remove button.

4. Link an Event to a Risk

Likewise, it is also good practice to link an event to any existing risks that are relevant. This allows consequences to become available as events in their own right so that you can track any consequences that did actually take place.

Important: Once a risk has been connected to an event it cannot be undone.

How to do it:

1. Click on the event you have created on the timeline.
2. Click on the Classify tab.
3. In the Risk Event section click the add button  .
4. Locate the risk you would like to add.
5. Click the radio button to add the risk. 
6. Repeat this process for as many reports as you need to add.

The icon on the event will change once an event has been linked to a risk.

Added the wrong risk? Don’t panic. Although you cannot remove the link between the event and the risk, you can delete the event and re-create it.

5. Add a Consequence to a Risk Event

Consequences are the result of a risk taking place. If the event is linked to a risk you will be able to associate the events that follow a risk-linked event to an identified consequence. A consequence is only available for selection when you are adding an event that follows a risk.

How to do it: 

1. Click on the bottom connector point on the risk event and click the add button.
2. Set the type of event to Consequence.
3. Select the consequence from the selection list.
4. Enter the date that the consequence took place. 
5. Click Create.
6. Repeat this process to add as many consequences as needed. 

No consequences showing? Only consequences listed against the risk event will be available in the timeline. Please refer to the risk module articles for further information.

6. Add a Threat to a Risk Event

Threats are factors that can lead to an event taking place if no preventive controls are in place. If the event is linked to a risk you will be able to associate the preceding events to an identified threat. A threat is only available for selection when you are adding an event that precedes a risk.

How to do it: 

1. Click on the top connector point on the risk event and click the add button.
2. Set the type of event to Threat.
3. Select the threat from the selection list.
4. Enter the date that the threat materialised. 
5. Click Create.
6. Repeat this process to add as many threats as needed. 

No threats showing? Only threats listed against the risk event will be available in the timeline. Please refer to the risk module articles for further information.

7. Classify the Event 

Similar to reports it is good practice to classify events. 

How to do it:

1. Click on the event you have created on the timeline.
2. Click on the Classify tab.
3. Go to the Classifications section and click Add.
4. Browse for the classification items you want to add to the event.
5. Check the  box to add the classification.

Added the wrong classification? Don’t panic! You can always remove the classification by clicking the remove button.

8. Add Additional Information

How to do it:

1. Click on the event.
2. Click on the Additional tab.
3. In the Location section click the locator icon to enter the location that the event took place.
4. In the Notes section add any notes that are relevant to the event.
5. In the Attachments section add any attachments that could act as evidence relating to the event.

Important: Your web browser may block your location from being detected. You can either allow this by clicking the relevant pop-up in your browser or you can enter a location (e.g. postal code or GPS coordinates) to proceed.

9. Delete the Event 

Events can also be deleted if they are no longer needed as part of the timeline.

How to do it: 

1. Click on the event.
2. Click on the action menu on the side panel.
3. Click Delete.
4. Click Delete to confirm.

Reminder: If this event is a preceding event then it cannot be deleted. Only events that have no follow-up events can be deleted.

10. Further Reading

• How to Delete a Report
• How to Close a Report 
• How to Risk Assess a Report