Handle security incidents using Advanced Work Assignment

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：2分

    • Handle security incidents assigned to you in SIR Workspace using Advanced Work Assignment.

    始める前に

    Role required: sn_si_analyst and awa_agent

    手順

    1. Navigate to Workspaces > Security Incident Response Workspace.
    2. Select the Inbox button.
    3. Indicate your availability status by selecting your presence state in the Status field.
      The available presence states are:
      • Available: You’re available and can accept security incidents. Whether you’ll be assigned incoming incidents is based on the configured service channel, queues and assignment rules.
        注:
        If auto-assignment has been enabled, security incidents are directly assigned to you.
      • Away: You aren’t available to accept assignments of incoming incidents.
      • Offline (the default): You’re offline and aren’t available to accept assignments of incoming incidents.
    4. Accept or reject a security incident assignment.
      注:
      If rejection handling hasn’t been enabled in AWA, the Reject option isn’t available.
      • Accept the incident by selecting Accept.

        The incident is assigned to you.

      • Reject the incident by selecting Reject and select a reason for the rejection.