Handle security incidents using Advanced Work Assignment

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 2분

    • Handle security incidents assigned to you in SIR Workspace using Advanced Work Assignment.

    시작하기 전에

    Role required: sn_si_analyst and awa_agent

    프로시저

    1. Navigate to Workspaces > Security Incident Response Workspace.
    2. Select the Inbox button.
    3. Indicate your availability status by selecting your presence state in the Status field.
      The available presence states are:
      • Available: You’re available and can accept security incidents. Whether you’ll be assigned incoming incidents is based on the configured service channel, queues and assignment rules.
        주:
        If auto-assignment has been enabled, security incidents are directly assigned to you.
      • Away: You aren’t available to accept assignments of incoming incidents.
      • Offline (the default): You’re offline and aren’t available to accept assignments of incoming incidents.
    4. Accept or reject a security incident assignment.
      주:
      If rejection handling hasn’t been enabled in AWA, the Reject option isn’t available.
      • Accept the incident by selecting Accept.

        The incident is assigned to you.

      • Reject the incident by selecting Reject and select a reason for the rejection.