Complete action tasks and report incidents associated with regulations

Report incidents or security incidents associated with multiple regulations for various legal entities. The automated workflow generates regulatory reporting assessments of IT incidents, and Digital resilience incident (DRI) Initial, Intermediate, and Final reports, all within regulatory timelines. Complete the action tasks and generate reports in Microsoft Word format, as required by regulatory authorities for analysis.

Before you begin

Role required: sn_oper_res.manager

About this task

Note:

The regulation status, previously a field on the Digital resilience incident reporting (DRIR) case form, is now displayed within the Regulations related list.

Procedure

1. Navigate to Workspaces > Operational Resilience Workspace > Digital resilience incident reporting > All incident reporting cases and open the incident reporting case from the list that you want to work on.

   From the Digital resilience incident reporting (DRIR) cases in the instance, DRI0001003 is selected for this example.

   

   Its automated workflow generates the Regulatory reporting assessment of IT incidents, DRI Initial report, DRI Intermediate report, and DRI Final report action tasks.

2. Review the incident record's 'Action tasks' and 'Regulations' related lists for assigned tasks and mapped regulations.

   The examples show that an action task is assigned automatically.

   

   A regulation is mapped to the case.

   
3. Review the details of the Digital resilience incident reporting case and verify that the owner of the case is a member of the assignment group.

   A sample Digital resilience incident reporting incident is shown where the source is Incident, Source record is in the New state, the source record is an Incident INC0010005, and the date of discovery is listed. The case is assigned to the 'Digital Resilience Incident Managers' assignment group.

   
4. As a Digital Resilience Incident Manager, log in to the case record, assign it to an analyst from your group, and select Save.

   The example shows that an analyst, Opres manager01, is assigned to the 'Digital resilience incident reporting: Facility issue' case.

   

   As the assigned analyst, you can begin working on the action tasks.

5. Open the first action task in the case, verify that it’s assigned to a user, and update the state of the action task to Assigned.

   The example shows that the 'Regulatory reporting assessment of IT incidents' action task is updated to the Assigned state.

   
   
6. Select View assessment, select Start in the assessment section of the action task, and respond to the questions in the assessment template.
   Note:

   The View assessment UI action is displayed only when the action task is in the Assigned state.

   As an analyst, you can start the assessment as shown in the example.

   

   Sample assessment questions and answers are shown in the example.

   Note:

   You can trigger the assessment from an incident or a security incident.

   
7. To submit the responses to the questions, select Submit and respond to the confirmation message by selecting Submit again.

   The assessment submission form is shown in the example.

   

   When you complete the assessment, its state is shown as Completed in the Assessment tab.

   

   The assessment is pending for review and the state is updated to Review as shown in the action task.

   

   Once the assessment is submitted, the regulation status is updated to 'Reportable' as shown in the Regulations related list.

   

   In this example, the action task CCT002001 is in the 'Review' state, while CCT002002 for 'DRI Initial report' has been created automatically.

   
8. As a reviewer of the action task, log in and complete the review.
9. Assign the second action task, 'DRI Initial report', to a user from the assignment group, update its state to Assigned, and select View assessment to respond to the assessment.
10. Complete the review and submit the assessment for the 'DRI Initial report' action task.
    The next action task, 'DRI Intermediate report' is created automatically.
11. Assign the 'DRI Intermediate report' action task to a user from the assignment group, update its state to Assigned, respond to the questions, complete the review, and submit the assessment for the 'DRI Intermediate report' action task.

    Starting with Digital resilience incident reporting Release 22.0.x, export capabilities for DRIR case tasks are enhanced. Export options are now consolidated into a unified Export drop-down, replacing the previous separate buttons to support multiple formats.

    Note:

    The export functionality is available only for assessment-type action tasks.

    When you navigate to an assessment action task, you can access the export options as shown in the example.

    • Generate MS Word: Creates a Microsoft Word document of the assessment.
    • Export Excel: Displays the assessment sections in separate sheets in Microsoft Excel, with questions as column headers and their respective answers in the columns.
    • Export JSON: Provides a JSON structure with question-and-answer pairs in key-value format, ideal for automated systems and integrations.

    

    Select a format from the Export drop-down, enter a file name, and save— the report downloads automatically. This enhancement streamlines your workflow for regulatory reporting, documentation, and compliance purposes.

    The next action task, 'DRI Final report' is created automatically.
12. Assign the 'DRI Final report' action task to a user from the assignment group, update its state to Assigned, respond to the questions, complete the review, and submit the assessment for the 'DRI Final report' action task.

    The action task, 'DRI Final report' is complete.

    You have now completed all action tasks required for reporting the incident or security incident mapped to the regulation.

13. To export the action task report to your local drive, select Export.
    1. Select a format from the Export drop-down menu.
    2. Enter a file name, and select Save.
       Format options include the following:

       • Generate MS Word: Creates a Microsoft Word document of the assessment.
       • Export Excel: Displays the assessment sections in separate sheets in Microsoft Excel, with questions as column headers and their respective answers in the columns.
       • Export JSON: Provides a JSON structure with question-and-answer pairs in key-value format, ideal for automated systems and integrations.

       Starting with Digital resilience incident reporting Release 22.0.x, export capabilities for DRIR case tasks are enhanced. Export options are now consolidated into a unified Export drop-down, replacing the previous separate buttons to support multiple formats.

       Note:

       The export functionality is available only for assessment-type action tasks. This enhancement streamlines your workflow for regulatory reporting, documentation, and compliance purposes.

       When you navigate to an assessment action task, you can access the export options as shown in the example.

       
    The report downloads automatically.
14. To generate the report of an action task in Microsoft Word format, select Generate MS Word.

    Action task reports must be generated in Microsoft Word format as required by regulatory authorities for analysis. When you select the Generate MS Word UI action, the Generate report window is displayed.

    1. In the Generate report window, choose the desired Word template in the Report template field.
    2. Add the name of the report in the Name of report field.

       The example shows the Word template and sample name of the report.

       
    3. Select Generate.
       A message is displayed that the report is being generated.

    The action task report is generated in the Microsoft Word format. It includes information from the Details and Assessments tabs and attachments. It includes information such as form sections, questions, template sections, question answers, and attachment links as shown in the examples.

    

    For information on Word templates and Template configurations, see Generating Microsoft Word reports using Document designer.

    The generation of Microsoft Word reports, required by regulatory authorities for analysis in Digital resilience incident reporting, is completed with this step.

15. To generate a report using Microsoft Excel, select Export Excel.

    The Microsoft Excel file and formats are shown in the example.

    
16. To generate a report in JSON format, select Export JSON.

    The example shows a report in JSON format.

    
17. To save the action task in the instance, select Save.
    Saving the action task in the instance completes the required reporting workflow.