In implementing PSIRF, one of the questions I get asked most frequently is 'how do we decide what our response to an incident is?'. Well, in essence to get the benefit of PSIRF, your organisation needs to waste less time on deciding the level of investigation/response, and use that time to focus on your learning response and improvement work.
I am lucky to work alongside a number of organisations, supporting their implementation of PSIRF, and as part of this work at Shrewsbury and Telford NHS Trust, we developed a decision tree. I can only take credit for the idea, and the full credit for the work needs to go to the governance team, namely Sara Cormack at SaTH for her work in testing this and refining it. I am sharing here with their permission that others may learn from it, and perhaps iterate for your own purpose.
The idea is that in using this kind of decision tree, you can remove the need for large meetings with multiple attendees deciding what an incident response is.
We suggest that in refining this for your organisation, you would consider looking at what your work on priorities are, and also your learning responses. The rest of the chart should be fairly standard.
Test it with a couple of your own incidents and let me know how you get on, and certainly let me know if you use it and find it useful!