On-Call Schedule for Security Incident Response

rcarmack1
Kilo Guru

Is anyone familiar with a way to achieve an on-call rotation for auto assignment of Security Incident Response records? An example would be 6 analysts, who are on-call from M-Sunday, on a six week rotation.  Existing options in the SIR Configuration don't appear to be helpful here, as they are coverage areas/time zone related, and I'm not sure how to approach a workflow for this type of scenario.  

1 REPLY 1

PSCWILLEY
Tera Contributor

Wondered if you ever found a solution to this. I am in the same boat that management wanted the incident to be assigned to the primary on-call for the week. Right now it seems that SecOps only gives the option for Round Robin.