This report is based on information risk reviews of incident management at 10 local authorities between February and August 2017.