In the incident report, the "report" uses UTC and the remediations/signals use UTC-6. Consistency for all sections of the incident report would be good.