Security Event Notifications

View, manage, and analyze the default security event notification policies on your ServiceNow instance, as well as access the functionality to create custom policies.

Access Security Event Notifications from the Security Center homepage by opening the Security Monitoring Console in the Security Consoles section, then selecting the Security Event Notifications tab.

Customize and create notification policies that trigger email notifications when users perform actions in the ServiceNow AI Platform that might be insecure or require admin monitoring.

Admins can customize the values for the default policies, clone, and edit default policies or create their own custom ones.

Security policies

The Security Event Notifications console displays important information regarding the security policies on your instance. This table includes columns displaying:

Label	Description
Name	The name of the security event notification policy.
Status	The status of a policy can be either active or inactive.
Updated	The date and time of when the policy was last updated.
Updated by	The user that updated a policy.
Last triggered on	The date and time the policy last ran.
Triggered count last week	The number of triggers a policy generated the past 7 days.
Percentage change	The rate of change for weekly triggers, calculated as a percentage. 주: For example, if this policy triggers an average of 5 notifications a week and it triggered 10 times last week, that would be a percentage increase of 100%.

Select a policy on the table to view more detail, including an overview, settings, and notification history. Select the New custom policy button to create a custom policy tailored to your organization's use cases.

Manage security banner announcements

Select Manage announcement settings to control whether admins receive banner notifications on this instance. For information on these announcements, see Security banner announcements.

• Create custom security event notification policies
  Learn how to create custom security event notifications that are specific to your organization's needs. This enables you to monitor actions taken by users and groups on your instance and generate notifications for potential security risks.
• Modify security event notification policies
  Learn how to modify the settings of your security event notification policies.
• Configure preferences for security event notification policies
  Discover how to customize security event notification policies in Security Center to align with your organization's specific needs.
• Security Event Notifications history
  Explore the complete history of security event notifications on your instance.