Create and distribute MSIM Status Reports

  • Release version: Zurich
  • Updated July 31, 2025
  • 4 minutes to read

    • As a Major Security Incident manager, you can create and distribute the different status reports to different stakeholders at various intervals based on the configured report template or a previous status report throughout the course of the major security incident resolution.

    Before you begin

    Role required: sn_msi.workspace_manager

    You can preview the previously configured summary report data elements, add additional text or summary, remove individual report components as needed, and verify the accuracy and completeness of the report before distributing it to different stakeholders.

    Create the status reports by selecting the desired report template that was initially configured on the MSI Report Templates Setup page.

    Procedure

    1. Navigate to Workspaces > Major Security Incident Management > Major Security Incidents.
    2. Select the Lists view.
    3. Select the respective promoted MSI record.
    4. Select the Status Reports tab.
      The Status Reports tab contains three different types of subsections such as below.
      Field Description
      Report Name Name of the status report template.
      Note:
      The Status Reports view lists the existing predefined report templates that are available as a part of the base system for the concerned persona. For example, Executive Status Reports through email (Mobile-friendly), Technical Status Reports and Executive Status Reports as PDFs.
      Updated The date when the report template was last updated.
      Report Type Type of status report. The status report can be in one of the following types:
      • PDF
      • Email
      State State of the status reports. The status reports can be in one of the following states:
      • Draft
      • Queued
      • Published
    5. Select the type of the status report that you would want to view or select New to create a status report.
      Figure 1. MSIM Status Reports tab
      Create and distribute MSIM Status Reports
    6. Choose one of the following status report types from the list.
      • Executive Email Status Reports that are mobile-friendly.
      • Technical Status Report PDF
      • Executive Status Report PDF
      Note:
      When you select any desired report template, the preview of the selected report is immediately generated in the right-pane. You can view the selected status report of the MSI.
    7. On the Executive Email Status Report template, fill the sections with the details of the status report.
      Report sectionDescription
      Updates Provide a summary of the status update. This section contains the following:
      • MSI Summary: Provide a brief summary of the major security incident.
      • Append text from last report shared: Select this option to append the text from the last report shared.
      Explanation Add an explanation on what has changed since the last status update was done. This section contains the following:
      • Key updates: Provide key updates like what the security team should know about the major security incident, name the key events that took place, and list any pending actions.
      • Next Update: Provide the date and time of the next update for resolving the major security incident. For example, 5:00 pm EST on March 25th, 2024.
      • Append text from last report shared: Select this option to append the text from the last report shared.
      • Filter elements: Select the report elements to be included in the report. For example, Key Updates or Next Updates.
      Additional Information Provide specific details relevant to the status update.
      Visualizations Select the visualizations that best help communicate the status update.
      • Incident Impact: Select the Incident Impact metrics like Affected Assets, Affected Location, Affected Users that are related to the status update.
      • Filter elements: Select the report elements to be included in the report. For example, Incident Impact.
      Lists Select lists of records that provide context to the status update.
      • Linked records: Select the records that are linked to the major security incident status update. For example, Linked Security Incident.
      • Filter elements: Select the report elements to be included in the report. For example, Linked records.
      Note:
      The options that you’ve selected from the Status Reports section are the same options that are rendered in the Preview report.
      Figure 2. Status Report Template
      Status Report Template
    8. Select Save to save the updates you made to the status report.
    9. Select Share to share the status report with internal and external stakeholders.
      The Share dialog box appears.
      1. In the Subject field, enter the subject for the email report.
      2. In the Add internal recipients field, type and select the recipients for the email report.
      3. In the Add external recipients field, type the recipients' email or DL for the email report.
        You can add multiple email IDs using a comma or semi-colon.
    10. Select Email Report.
      An email with the attached PDF Status Report is successfully sent to the concerned recipient for them to verify.
      Figure 3. Status Report - email
      Report email
    11. You can also perform the following actions on the Status Reports tab:
      1. Use the Refresh action on the Status Reports view to refresh the status reports list.
      2. Use the List Actions action on the Status Reports view to edit columns or reset the widths of the status reports list.
      3. Use the Filter action on the Status Reports view to filter the status reports based on certain conditions.