Propose as Major Security Incident

Propose a security incident as a Major Security Incident (MSI).

Before you begin

Role required: sn_si.analyst.

Procedure

1. Navigate to Workspaces > Security Incident Response Workspace.
2. Open any security incident.
3. Click Propose to Major Security Incident.

   

4. On the form, fill in the fields such as Detection date, Justification, and Potential impact.
5. Click Propose.
   The incident record is proposed as a major security incident candidate.
   After the incident record is proposed as a major security incident candidate, Major Security Incident Candidate tag is applied and displayed on the security incident form banner.

   Note:

   Click Unlink from Major Security Incident to unlink the incident if you don't wish to propose or doesn't have any critical impact. The incident will be unlinked and lists under the list view to the security analyst for remediation.