Alert responders, investigate threats, draft incident reports. Every one is ready to run, and you can adjust it in plain language.
Keep emailed support issues linked to one current register row.
Your problem register stays current as reports arrive by email, with missing details called out and the original thread close at hand.
Grant restricted access to a cleared incident report for review.
Your outside reviewer gets a restricted report link and deadline for the incident review. You get a copy of the request or a clear problem to fix.