Commonly used incident classification methodologies have resulted in adverse consequences, including over classification, poor investigation outcomes, unnecessary investigations and unsustainable workloads for those responsible for facilitating the investigation.