A system for managing electronically stored information includes a server having a processor and a memory. A database is coupled to the server. A container component is configured in the memory. The container component is configured to store and retrieve incident information from the database. The incident information comprising at least one of metadata and actual data relating to an incident. A relationship component is configured in the memory to provide a relationship between the container component and an artifact using the incident information relating to the incident.