Dear SecOps Community Members,
We're pleased to announced that version 3 of Major Security Incident Management (MSIM) is now live on the Store! The new version delivers several big updates that have been requested by customers and partners.
Let's take a closer look at 5 of the highlights that are available today in the February 2024 release of MSIM:
1- Initiate Conference Calls On-demand
Virtually every Incident Commander that we spoke with, said the first thing they do when suspecting a major security incident candidate is detected in their environment is to get on conference with their core team, to determine if it's truly a major incident. In MSIM version 3, you can directly start a call from the MSIM Workspace, and decide who to invite. The solution supports:
- Teams Conference Calling
- Zoom Conference Calling
- WebEx Conference Calling
It's worth noting that conference calls can be initiated for major security incidents in both the 'proposed' or the 'promoted' state. Participants whom you invite to a call will receive an email notification along with a Teams notification (for Teams calls). The MSIM workspace keeps a track record of calls that have been initiated, along with meeting participants.
2- Simplified Executive Status Reports
Another highlight of version 3, is executive status reports that are now shareable directly over mobile-friendly emails. Email report formats are a second option in addition to PDF reports which also exists in the product.
It's worth noting that the templates for both formats (Email and PDF) are provided with MSIM. This enables you to easily add in your company logo, tagline, headers, and any data classifications that you want to apply (such as confidential, restricted, or attorney-client privileged).
3- Updated Visual Task Board
The Visual Task Board component has been updated in the latest version of MSIM. In addition to viewing and tracking Tasks on a Kanban board, you can pivot to a list view, for easier sorting, searching, and filtering.
The Tasks tab also enables you to create a New Task for specific groups or people to work on responding to the major security incident. Any updates made to the corresponding task by incident responders will be automatically reflected in the MSIM workspace.
Important Tip: To use the new Visual Task Board be sure to install the MSIM VTB Task Card component from the ServiceNow store.
4- Redesigned Overview Tab with Executive Summary
The Overview tab has been redesigned to leverage the latest ServiceNow visualizations components that are available in the UI Builder. For customers and implementations this mean that MSIM version 3, makes it easier for you to add or modify visualizations on the Overview tab as needed.
We've also introduced a new Executive summary that you can use to summarize the latest status for each major security incident. Additionally, the Timeline component has been moved to the center of the Overview Tab. Having the Timeline inside the Overview tab (as opposed to above all tabs) saves your real-estate when you're working on the other tabs of the applications.
5- Enforce Restriction Feature
Enforce Restriction is an optional setting you that you can enable for each of your major security incidents. This setting gives you the ability to selectively decide which specific people or groups, will have access to a specific major security incident record.
For more information about MSIM, and to access the Quick Start Guide, be sure to reference the Supporting Links and Docs on the Store here.
Thanks and we look forward to hearing your feedback on version 3!
Antonio
