When an incident is caused by a defect, how should IT teams respond? It’s a question we’ve been answering for years, and it’s still just as relevant, especially in today’s complex, fast-moving environments where software, infrastructure, and services are deeply interconnected. In ITIL 4 , an incident is defined as an unplanned interruption to a service or reduction in the quality of a service . That hasn’t changed. But what happens when the root cause of that interruption is a defect - an underlying flaw in software, hardware, or configuration? Here's the Modern Approach: Log the incident : The user is experiencing an interruption that needs immediate attention. Document known defect links : If the defect is known (e.g., “already logged with Dev”), link the incident to the problem record , known error , or defect backlog in your tracking system (Jira, Azure DevOps, etc.). Communicate expectations : While the defect may not have a quick fix, the incident response sh...