A determination is made whether an incident that affects one configuration item in a plurality of configuration items within an information technology environment impacts at least one event for at least one other configuration item in the plurality of configuration items. In response to determining that the incident does impact at least one event on at least one other configuration item, one or more pre-defined actions to execute on the at least one other configuration item are identified. The identified one or more pre-defined actions are executed on the at least one other configuration item.