Internet Content Adaption Protocol (ICAP) integration for DLP IR

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 3분

    • The Internet Content Adaption Protocol (ICAP) DLP integration supports the ingestion of Data Loss Prevention Incident Response alerts, allows the fetching of match content, and evidence files from Amazon S3 created on the ICAP supported Data Loss Prevention Incident Response deployment.

    After the alerts are ingested, you can use the DLP workspace to view the required key information such as match content, alert severity, and various incident management functionalities to remediate the DLP incidents.

    Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Overview and key features

    The Internet Content Adaption Protocol (ICAP) integration helps you to track the usage and movement of sensitive data on various platforms.

    This integration includes the following key features:
    • Ingestion of DLP Alerts: Users would be able to configure and schedule the ingestion of DLP alerts from specified Amazon S3 buckets. This includes the capability to perform delta imports to ensure only new data is ingested.
    • Display ingested alerts in the DLP Workspace: Once the alerts are ingested, they should be displayed in the DLP workspace, providing key details about each alert such as match content, alert severity, and relevant metadata.
    • Match content: Sensitive information records are created during ingestion, match content is fetched when the record is opened.
    • Evidence file download: The system would allow users to download associated evidence files directly from the DLP workspace for further investigation or review.
    • Ability to customize and define the severity mapping between ICAP DLP incidents with ServiceNow incidents.