Handling incident attributes