An operational framework for incident handling