premise: The database accounted for the number of information security incidents that had been reported, the types of incidents, and actions taken to resolve each incident, including disciplinary actions.
hypothesis: The database also automatically collects information as the users access information and logs it for further reference.