Create response tasks

After a security incident has been created, you can create response tasks to track separate actions to be performed to respond to the security issue.

始める前に

重要:

If you are unable to create a response task, verify that no custom ACLs on the task table are blocking access.

Role required: sn_si.basic

手順

1. Navigate to the appropriate location to open the security incident for which you want to create tasks.
   For example:

   • To create a response task based on a security incident assigned to you, select Security Incident > Incidents > Assigned to Me.
   • To create a response task based on a security incident assigned to your team, select Security Incident > Incidents > Assigned to Team > Incidents.
   • To create a response task based on an unassigned security incident, select Security Incident > Incidents > Unassigned Incidents.
2. Open the security incident for which you want to add response tasks.
3. Select the Add Response Task button in the form header.
   注:

   To create any other task, select the Tasks tab in the incident Related List.
4. Fill in the fields on the form, as appropriate.

   表 : 1. Security incident

   Field	Description
   Select security tag	If you set up and activated security tags, you can select one or more tags to add metadata to the record or specify the degree of sensitivity of the response task. If you did not set up or activate security tags, this drop-down list is not displayed.
   Number	[Read only] The automatically generated Security Incident Response number.
   Parent	[Read only] The number of the related security incident.
   Configuration Item	The configuration item (resource) affected by the security issue.
   Affected User	The person affected by the security issue.
   Priority	The priority used to determine when this task is performed.
   State	The current state of the security response task. Upon task creation, this field defaults to Draft.
   Skills	The skill required to perform this task. Select the lock icon and select the skill required. After you have completed your selections, select the lock icon again.
   Assignment group	The assignment group from which the assigned worker is selected. 注: Select an external group if you want to provide the read-only access of the parent security incident of this response task.
   Assigned to	The individual assigned to perform the task.
   Access to security incident	Option to provide the read-access to the parent security incident of this response task.
   Short description	A description of the Security Incident Response task.
   Description	A description for the selected task.
   Secure notes	The work notes that are encrypted and not visible to the customer.
   Work notes	The work notes that aren’t visible to the customer.
   Comments	Comments that you want to be visible to the customer.
   Email	Option to send email to the stakeholders.

5. When you have completed your entries, select Submit.
   注:

   After you have created Security Incident Response tasks, you can view them using any of the following applications under the Response Tasks module:

   • Assigned to Me.
   • Assigned to Team.
   • Show Open Tasks
   • Show All Tasks
   • Unassigned Tasks.