<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Building Incident Reporting Culture

## Agent Script

### Commands

| Command | Description |
|---|---|
| `node agent.js design-channel --platforms slack,email,portal --sla 15min` | Design multi-channel incident reporting system |
| `node agent.js train-recognition --scenarios phishing,data-leak,suspicious-access` | Build event recognition training scenarios |
| `node agent.js gamify --rewards points,badges --leaderboard team` | Design gamification layer for reporting program |
| `node agent.js measure --metrics report-rate,mean-time-to-report,false-positive-rate` | Measure incident reporting culture health |

### Examples

```bash
# Design multi-channel incident reporting system
node agent.js design-channel --platforms slack,email,portal --sla 15min

# Build event recognition training scenarios
node agent.js train-recognition --scenarios phishing,data-leak,suspicious-access

# Design gamification layer for reporting program
node agent.js gamify --rewards points,badges --leaderboard team

# Measure incident reporting culture health
node agent.js measure --metrics report-rate,mean-time-to-report,false-positive-rate
```

## External Tools

| Tool | Command | Purpose |
|---|---|---|
| ServiceNow SecOps | `snow --incident-stats --quarter Q1` | Security incident tracking |
| PagerDuty | `pd --oncall-report --team security` | Incident escalation and on-call |
| Slack Workflow Builder | `slack-workflow --export reporting-flow` | Automated reporting intake |

## Compliance Frameworks

| Standard | Training Requirement |
|---|---|
| NIST SP 800-61 | Computer security incident handling guide |
| ISO 27035 | Information security incident management |
| SANS Incident Handler | Incident handling and response methodology |
| Just Culture Model | Blame-free reporting and accountability balance |
