Does anyone have experience using Advanced Work Assignment with Security Incident Response?

[charles2024]

I have attempted to set up AWA so that I can route security incidents to the various security response teams, but the results vary and do not appear to be utilising my designated queue or assignment rules.

I have turned off the default SIRT rule and expected AWS to "take over" the assignment action, and tried the settings in the Security Incident configuration.

Is there anything else that might be interfering with AWA for Security incidents?

Any information around this specifically would be welcome.

Thanks.

[Harmeet2Singh]

Please check if there are any BR's that are assigning the incidents with some logic, they will override the AWA if present.

[charles2024]

Hi Harmeet2Singh,
I take a look.
Thank for you comment