--- sourceDocument: australia Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/australia/delta-xanadu-australia Release : - australia ft:locale : - en-US ft:publication_title : - australia Combined Product Files ft:clusterId : - delta3ax bundleId : - delta3ax --- # Combined Data Loss Prevention Incident Response release notes for upgrades from Xanadu to Australia # Combined Data Loss Prevention Incident Response release notes for upgrades from Xanadu to Australia {#ariaid-title1} Release version: Australia Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 6 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Data Loss Prevention Incident Response Release Notes for Upgrades from Xanadu to Australia This consolidated release note provides ServiceNow customers with a comprehensive view of all Data Loss Prevention (DLP) Incident Response updates from the Xanadu through Australia releases. It is designed to assist in preparing for upgrades by summarizing new features, changes, activation steps, and important considerations for each release family. Notably, the Australia release itself includes no new updates, with the primary innovations introduced in prior releases, especially Yokohama and Zurich. Show full answer Show less ## New Features * **SLA Triggers and Definitions (Yokohama, Zurich):** Enable prompt, efficient incident responses by creating SLA triggers and defining conditions and durations for response to data breaches, improving incident management timelines. * **Proofpoint Integration Setup (Yokohama, Zurich):** Create applications in Proofpoint and obtain client credentials to securely access Proofpoint APIs, facilitating seamless integration and automation of DLP incident data. * **ICAP Integration (Yokohama):** Support ingestion of DLP alerts and retrieval of match content and evidence files from Amazon S3, enhancing alert processing capabilities. * **Evidence File Management Enhancements (Yokohama):** Store evidence files directly within ServiceNow using Proofpoint or Symantec DLP integration, enabling secure, centralized management and tracking of evidence. * **Evidence File Preview and Download (Yokohama):** Preview and download evidence files for Microsoft OneDrive, Exchange Online, SharePoint, and Netskope integrations directly from the DLP Workspace, simplifying evidence review workflows. * **Playbook Introduction (Yokohama):** Introduce playbooks within the DLP Workspace to streamline and standardize incident response operations. * **Incident Consolidation Rules (Yokohama):** Ensure that the parent incident retains the highest priority among consolidated incidents, improving incident prioritization accuracy. ## Changes * **DLP Analyst Workspace Update (Yokohama):** Added a required closure code action before incident closure to enforce consistent incident resolution documentation. * **Incident Table Field Renaming (Yokohama):** Renamed "Custom Fields" column to "Additional Incident Data Fields" to better represent the purpose of these fields. ## Activation and Installation Data Loss Prevention Incident Response is available for installation via the ServiceNow Store. Customers should request the application through the store and refer to the cumulative release notes available there for additional context. Activation of the Security Support Common plugin occurs automatically when any main Security Operations applications are enabled. ## Additional Notes * No features or functionalities were removed or deprecated across the releases from Xanadu through Australia. * There are no new browser, accessibility, localization, or additional requirements introduced in this upgrade path. * Important upgrade tasks and preparation steps should be reviewed prior to upgrading to Australia, although no specific tasks are detailed here. ## Why This Matters These enhancements empower ServiceNow customers to manage DLP incidents more effectively by automating SLA tracking, improving integration with key security platforms, and simplifying evidence management. The introduction of playbooks and incident consolidation rules supports operational efficiency and accurate prioritization, crucial for timely and compliant data breach responses. Consolidated page of all release notes for Data Loss Prevention Incident Response from Xanadu to Australia. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Data Loss Prevention Incident Response release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Data Loss Prevention Incident Response to Australia Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-datalosspreventionincidentresponse-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## New features Between your current release family and Australia, new features were introduced for Data Loss Prevention Incident Response. {#dfrn3-datalosspreventionincidentresponse-summary__entry__12} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | [Create a Data Loss Prevention Incident Response SLA trigger](https://www.servicenow.com/docs/access?context=sla-records&family=yokohama&ft:locale=en-US) : Enable prompt and efficient responses to incidents by creating SLA triggers. [Create a Data Loss Prevention Incident Response SLA definition](https://www.servicenow.com/docs/access?context=dlp-sla-definitions&family=yokohama&ft:locale=en-US) : Outline the conditions and duration for responding to data breaches by creating Data Loss Prevention Incident Response SLA definitions. [Create an Application in Proofpoint and Obtain Client Credentials](https://www.servicenow.com/docs/access?context=create-application-proofpoint-dlp&family=yokohama&ft:locale=en-US) : Create an application in Proofpoint and configure the required settings to obtain client credentials. These credentials enable secure access to the Proofpoint API for seamless integration and automation. [Internet Content Adaption Protocol (ICAP) integration for DLP IR](https://www.servicenow.com/docs/access?context=icap-dlp-integration&family=yokohama&ft:locale=en-US) : Integration supports the ingestion of Data Loss Prevention Incident Response alerts, allows the fetching of match content, and evidence files from Amazon S3 created on the ICAP supported Data Loss Prevention Incident Response deployment. [Configure evidence file storage](https://www.servicenow.com/docs/access?context=configure-evidence-file-storage&family=yokohama&ft:locale=en-US) : Store evidence files directly in your ServiceNow instance with Proofpoint integration, by enhancing the ability to manage and track evidence files within the platform. [Configure evidence file storage](https://www.servicenow.com/docs/access?context=config-evidence-file&family=yokohama&ft:locale=en-US) : Symantec DLP supports evidence file storage to securely store the evidence files for the DLP Incidents. [Preview Evidence files for DLP incidents of type Exchange Online, OneDrive, and SharePoint](https://www.servicenow.com/docs/access?context=preview-file-dlp-microsoft&family=yokohama&ft:locale=en-US). : With the DLP Microsoft integration, preview evidence files in the DLP Workspace in the Microsoft OneDrive, Microsoft Exchange Online, and Microsoft SharePoint formats. You can preview and download evidence files directly from the preview interface, simplifying evidence review and retrieval. Netskope integration: [Preview evidence files](https://www.servicenow.com/docs/access?context=preview-files-netskope&family=yokohama&ft:locale=en-US) and [Download evidence files](https://www.servicenow.com/docs/access?context=download-files-netskope&family=yokohama&ft:locale=en-US) : With Netskope integration you can preview and download evidence files directly from the preview interface, simplifying evidence review and retrieval. [Preview evidence files](https://www.servicenow.com/docs/access?context=preview-evidence-files&family=yokohama&ft:locale=en-US) : Preview evidence files and download them directly from the preview interface, simplifying evidence review and retrieval. [Playbook for Data Loss Prevention Incident Response](https://www.servicenow.com/docs/access?context=playbook-for-dlp&family=yokohama&ft:locale=en-US) : Introduced playbooks in the DLP Workspace to enhance operational efficiency. [Create incident consolidation rules](https://www.servicenow.com/docs/access?context=configure-incident-consolidation-rules-to-consolidate-your-dlp-incidents&family=yokohama&ft:locale=en-US) : Parent incident is always assigned the highest priority among consolidated incidents, enhancing incident management accuracy. | | Zurich | [Create a Data Loss Prevention Incident Response SLA trigger](https://www.servicenow.com/docs/access?context=sla-records&family=zurich&ft:locale=en-US) : Enable prompt and efficient responses to incidents by creating SLA triggers. [Create a Data Loss Prevention Incident Response SLA definition](https://www.servicenow.com/docs/access?context=dlp-sla-definitions&family=zurich&ft:locale=en-US) : Outline the conditions and duration for responding to data breaches by creating Data Loss Prevention Incident Response SLA definitions. [Install and configure the Proofpoint integration for Data Loss Prevention](https://www.servicenow.com/docs/access?context=install-configure-proofpoint-integration-dlp&family=zurich&ft:locale=en-US) : Install and configure the Proofpoint integration to use the  Proofpoint DLP incident data to investigate DLP incidents. | | Australia | No updates for this release. | [ ] ## Changes Between your current release family and Australia, some changes were made to existing Data Loss Prevention Incident Response features. {#dfrn3-datalosspreventionincidentresponse-summary__entry__22} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | [Data Loss Prevention Incident Response Analyst Workspace](https://www.servicenow.com/docs/access?context=using-dlp-ops-portal&family=yokohama&ft:locale=en-US) : Introduced a new action in the DLP incident form view that requires users to specify a closure code prior to incident closure. [Create additional incident data fields](https://www.servicenow.com/docs/access?context=create-custom-fields-dlp&family=yokohama&ft:locale=en-US) : In the DLP incident table, the Custom Fields column has been renamed Additional Incident Data Fields. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Removed Between your current release family and Australia, some Data Loss Prevention Incident Response features or functionality were removed. {#dfrn3-datalosspreventionincidentresponse-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Deprecations Between your current release family and Australia, some Data Loss Prevention Incident Response features or functionality were deprecated. {#dfrn3-datalosspreventionincidentresponse-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Activation information Review information on how to activate Data Loss Prevention Incident Response. {#dfrn3-datalosspreventionincidentresponse-summary__entry__52} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | Activation information : Install Data Loss Prevention Incident Response by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). [Security Operations common functionality](https://www.servicenow.com/docs/access?context=sec-ops-common-functionality&family=yokohama&ft:locale=en-US) : The Security Support Common plugin is activated when any of the plugins for the main Security Operations applications (Security Incident Response, Vulnerability Response, Threat Intelligence, or Configuration Compliance) are activated. Important: Data Loss Prevention Incident Response is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | Activation information : Install Data Loss Prevention Incident Response by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). [Security Operations common functionality](https://www.servicenow.com/docs/access?context=sec-ops-common-functionality&family=zurich&ft:locale=en-US) : The Security Support Common plugin is activated when any of the plugins for the main Security Operations applications (Security Incident Response, Vulnerability Response, Threat Intelligence, or Configuration Compliance) are activated. Important: Data Loss Prevention Incident Response is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Data Loss Prevention Incident Response we have noted them here. {#dfrn3-datalosspreventionincidentresponse-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Data Loss Prevention Incident Response we have noted them here. {#dfrn3-datalosspreventionincidentresponse-summary__entry__72} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Data Loss Prevention Incident Response, such as specific requirements or compliance levels. {#dfrn3-datalosspreventionincidentresponse-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Data Loss Prevention Incident Response we have noted them here. {#dfrn3-datalosspreventionincidentresponse-summary__entry__92} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Data Loss Prevention Incident Response we have noted them here. {#dfrn3-datalosspreventionincidentresponse-summary__entry__102} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | * Enhanced the ability to securely store, manage, and track evidence files within the platform for all Data Loss Prevention Incident Response integrations. * Preview the evidence file of an incident from either the DLP IR analyst workspace or end user workspace. * Enhanced the DLP incident closure process by adding support for closure codes. * Introduced the Playbook feature in the DLP IR workspace to enhance operational efficiency. * Improved response to Data Loss Prevention (DLP) incidents through the initiation of SLA triggers. See [Data Loss Prevention Incident Response](https://www.servicenow.com/docs/access?context=dlp-landing&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * Improved response to Data Loss Prevention (DLP) incidents through the initiation of SLA triggers. * Introduced SLA Definition functionality that outlines the conditions and duration for responding to data breaches. * Configured DLP Proofpoint to generate Client ID and Client Secret to enable secure access to proofpoint. See [Data Loss Prevention Incident Response](https://www.servicenow.com/docs/access?context=dlp-landing&family=zurich&ft:locale=en-US) for more information. | | Australia | No updates for this release. | [ ]