1. A method comprising: configuring at least one processor to perform functions comprising: receiving data associated with an alert associated with a condition affecting an information technology system; determining whether the alert is actionable or non-actionable; and only if the alert is determined to be non-actionable, imposing a waiting time on the event requiring that the waiting time elapse before further action is taken for the event.