Abstract: Systems, methods, and apparatus integrating applications with a common purpose of information technology incident resolution are provided. An indication of an information technology incident is received and may include an incident record associated with the incident. Information may be extracted from the incident record. Various components may be executed to determine a cause of the incident and assist the interacting user with diagnosis and response to the incident. A description of the cause may be identified and a determination may be made as to whether the identified description or keyword statement is available for selection from a list of predefined selections in the incident record. An interacting user can choose to build a keyword statement using the selection lists within the software and then apply the keyword statement to the restoral description of the incident record. Any new descriptions created may be added to the list of predefined descriptions.