I. Overview

%%{init: { 'theme': 'base', 'themeVariables': { 'edgeLabelBackground': '#fff' }}}%%
flowchart LR
    A["Multiple closed incidents\nwith the same unresolved cause"] -- "Need one record to track the cause to elimination" --> B["Formal Problem\nRecord"]
    style A fill:#f9f9f9,stroke:#333,stroke-width:3px
    style B fill:#e1f5fe,stroke:#01579b,stroke-width:3px

Definition: A Problem Record is the individual working document that tracks one problem’s investigation, from initial suspicion of a common root cause through diagnosis, workaround, and permanent resolution.

Features:
( Ownership ) Opened and maintained by the problem manager, with technical input from the engineering or security teams best placed to diagnose the fault.
( Lifecycle ) Stays open until the underlying cause is eliminated, unlike an incident ticket that closes once service is restored.
( Single Source ) Gives the organization a single place to track that longer-running investigation effort.
( Investigation Trail ) Records the path from initial suspicion of a common root cause through diagnosis, workaround, and permanent resolution.

II. Structure & Process

flowchart TD
    A["Problem identified from incident pattern or major incident"] --> B["Problem Record opened and categorized"]
    B --> C["Root cause analysis performed"]
    C --> D["Workaround documented as Known Error"]
    D --> E["Permanent fix implemented"]
    E --> F["Resolution verified against linked incidents"]
    F --> G["Problem Record closed"]
FieldDescription
Problem IDUnique identifier for the record.
DescriptionSymptom pattern and scope of the suspected common cause.
PriorityImpact and urgency ranking used to sequence investigation.
Root CauseDiagnosed cause once root-cause analysis is complete.
WorkaroundInterim mitigation, if any, pending permanent fix.
Known Error StatusWhether the problem has been published as a known error.
Linked IncidentsIncident records that triggered or are associated with this problem.
Resolution/Closure DetailsPermanent fix applied and verification evidence.

The record stays open through diagnosis and remediation, referencing every linked incident as evidence of ongoing impact, and closes only when the permanent fix is verified to prevent recurrence.

III. Best Practices & Comparison

DocumentPrimary PurposeTriggerOwner
Problem Record TemplateTrack one problem’s investigation from open to closedRecurring or significant incident patternProblem manager
Known Error (KE) Record TemplatePublish the interim workaround for a diagnosed root causeRoot cause confirmed, fix pendingProblem manager
Major Incident Report TemplateDocument how a single major incident was detected and restoredMajor incident declaredIncident commander
  • Open a problem record as soon as a pattern of recurring incidents is detected, rather than waiting for a major incident.
  • Link every related incident to the problem record so its cumulative impact is visible when prioritizing fixes.
  • Keep root cause and workaround fields updated in real time so the known error record can be published without delay.
  • Do not close the record until the permanent fix is verified against a recurrence, not merely deployed.
  • Distinguish problem closure from incident closure explicitly: an incident can close while its root-cause problem remains open.

Related: Known Error (KE) Record Template, Problem Management Process, Major Problem Report Template.

Last updated 18 Aug 2026, 00:00 UTC. history