Handle security incidents using Advanced Work Assignment

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture

    • Handle security incidents assigned to you in SIR Workspace using Advanced Work Assignment.

    Avant de commencer

    Role required: sn_si_analyst and awa_agent

    Procédure

    1. Navigate to Workspaces > Security Incident Response Workspace.
    2. Select the Inbox button.
    3. Indicate your availability status by selecting your presence state in the Status field.
      The available presence states are:
      • Available: You’re available and can accept security incidents. Whether you’ll be assigned incoming incidents is based on the configured service channel, queues and assignment rules.
        Remarque :
        If auto-assignment has been enabled, security incidents are directly assigned to you.
      • Away: You aren’t available to accept assignments of incoming incidents.
      • Offline (the default): You’re offline and aren’t available to accept assignments of incoming incidents.
    4. Accept or reject a security incident assignment.
      Remarque :
      If rejection handling hasn’t been enabled in AWA, the Reject option isn’t available.
      • Accept the incident by selecting Accept.

        The incident is assigned to you.

      • Reject the incident by selecting Reject and select a reason for the rejection.