Arguably the most important function in the ITIL Incident process and thus also in the Major Incident process is information gathering which is primarily used to feed the three process steps highlighted below: