Configure preferences for security event notification policies

Discover how to customize security event notification policies in Security Center to align with your organization's specific needs.

Before you begin

Role required: admin

About this task

The Policy settings page is where you can customize the settings for a security event notification policy. Here, you can adjust options related to when the policy runs, the conditional logic, and the notifications that are sent.

Procedure

1. In Security Center, select Notifications.
2. Under the Security policies table, select a security event notification policy that you want to configure.
   For example, Send notification when high privileged role is granted.
3. Select Policy settings.
4. Configure the policy settings.

   Table 1. Policy settings configuration options

   Label	What to configure
   When to run	Trigger: The event that starts the policy.
   Conditions	The conditional logic and conditions to apply to your policies. Condition logic: two options All conditions must be met to trigger this policy: all conditions need to be valid for the policy to send notifications. Any of the conditions must be met to trigger this policy: notifications will be sent if any one of the conditions is valid. Add Condition: Select Add Condition and provide the appropriate values for it. You can remove a condition by selecting Remove condition.
   Notifications	The email body and email recipients: Notification: Select one of the predefined notification templates. See Create a custom email for security event notifications for more information. Add Notification: Select Add Notification. Groups: Select the group who should receive the notification. Users: Select the users who should receive the notification. You can remove a notification by selecting Remove notification.

   Note:

   If you want to make a policy inactive, select Deactivate. If you want to replicate a policy, select the down arrow next to the Update () button.
5. Select Update to save your settings.

• Create a custom email for security event notifications
  Learn how for creating a custom email for security event notifications by configuring new notifications, setting triggers, defining recipients, and crafting email content with dynamic event fields.