Create and distribute MSIM Status Reports

Rversion finale: Australia

Mis à jour 12 mars 2026

4 minutes de lecture

As a Major Security Incident (MSI) manager, you can create and distribute the different status reports to different stakeholders at various intervals based on the configured report template or a previous status report throughout the course of the major security incident resolution.

Avant de commencer

Role required: sn_msi.workspace_manager

You can preview the previously configured summary report data elements, add additional text or summary, remove individual report components as needed, and verify the accuracy and completeness of the report before distributing it to different stakeholders.

Create the status reports by selecting the desired report template that was initially configured on the MSI Report Templates Setup page.

Procédure

Navigate to Workspaces > Major Security Incident Management > Major Security Incidents.
Select the Lists view.
Select the respective promoted MSI record.

Select the Status Reports tab.

The Status Reports tab contains three different types of subsections such as below.


Field	Description
Report Name	Name of the status report template. Remarque : The Status Reports view lists the existing predefined report templates that are available as a part of the base system for the concerned persona. For example, Executive Status Reports through email (Mobile-friendly), Technical Status Reports and Executive Status Reports as PDFs.
Updated	The date when the report template was last updated.
Report Type	Type of status report. The status report can be in one of the following types: PDF Email
State	State of the status reports. The status reports can be in one of the following states: Draft Queued Published

Select the type of the status report that you would want to view or select New to create a status report.

Figure 1. MSIM Status Reports tab
Choose one of the following status report types from the list.
- Executive Email Status Reports that are mobile-friendly.
- Technical Status Report PDF
- Executive Status Report PDF
Remarque :
When you select any desired report template, the preview of the selected report is immediately generated in the right-pane. You can view the selected status report of the MSI.

On the Executive Email Status Report template, fill the sections with the details of the status report.

Report section	Description
Updates	Provide a summary of the status update. This section contains the following: MSI Summary: Provide a brief summary of the major security incident. Append text from last report shared: Select this option to append the text from the last report shared.
Explanation	Add an explanation on what has changed since the last status update was done. This section contains the following: Key updates: Provide key updates like what the security team should know about the major security incident, name the key events that took place, and list any pending actions. Next Update: Provide the date and time of the next update for resolving the major security incident. For example, 5:00 pm EST on March 25th, 2024. Append text from last report shared: Select this option to append the text from the last report shared. Filter elements: Select the report elements to be included in the report. For example, Key Updates or Next Updates.
Additional Information	Provide specific details relevant to the status update.
Visualizations	Select the visualizations that best help communicate the status update. Incident Impact: Select the Incident Impact metrics like Affected Assets, Affected Location, Affected Users that are related to the status update. Filter elements: Select the report elements to be included in the report. For example, Incident Impact.
Lists	Select lists of records that provide context to the status update. Linked records: Select the records that are linked to the major security incident status update. For example, Linked Security Incident. Filter elements: Select the report elements to be included in the report. For example, Linked records.

Remarque :

The options that you’ve selected from the Status Reports section are the same options that are rendered in the Preview report.

Select Save to save the updates you made to the status report.

Select Share to share the status report with internal and external stakeholders.

The Share dialog box appears. Fill in the fields in the dialog box:

Tableau 1. Share form table
Field	Description
Subject	Subject for the email report.
To, Cc, Bcc	Fields to add the email recipients. Emails can be added using one or more of the following: Select individual users or groups from drop-down lists. Manually enter email addresses into any of the recipient field. Copy and paste multiple comma-separated or semicolon-separated email addresses. Copy and paste existing distribution lists. Remarque : Recipient fields (To, Cc, and Bcc) are automatically populated with recipients from the most recently sent status report using the same template, eliminating the need to add recipients for recurring status report communications.
Remove Invalid Recipients	Option to remove all the invalid email addresses. This field appears only when there are invalid email addresses in a recipient field. Remarque : Invalid email addresses are highlighted with an error icon.
Clear ALL Recipients	Option to clear the all the recipients fields simultaneously. This field is enabled only when there is at least one email address in any of the recipient fields.
Body	Body of the email message.

Select Email Report.
An email with the attached PDF Status Report is successfully sent to the concerned recipient for them to verify.
Figure 3. Status Report - email
You can also perform the following actions on the Status Reports tab:
1. Use the Refresh action on the Status Reports view to refresh the status reports list.
2. Use the List Actions action on the Status Reports view to edit columns or reset the widths of the status reports list.
3. Use the Filter action on the Status Reports view to filter the status reports based on certain conditions.