Data Loss Prevention Incident Response release notes

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read
  • The ServiceNow® Data Loss Prevention Incident Response application helps you to manage sensitive information for your customers such as financial and proprietary data, health records, or Social Security numbers. Data Loss Prevention Incident Response was enhanced and updated in the Zurich release.

    Data Loss Prevention Incident Response highlights for the Zurich release

    • Improved response to Data Loss Prevention (DLP) incidents through the initiation of SLA triggers.
    • Introduced SLA Definition functionality that outlines the conditions and duration for responding to data breaches.
    • Configured DLP Proofpoint to generate Client ID and Client Secret to enable secure access to proofpoint.

    See Data Loss Prevention Incident Response for more information.

    Important:
    Data Loss Prevention Incident Response is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.

    New in the Zurich release

    Create a Data Loss Prevention Incident Response SLA trigger
    Enable prompt and efficient responses to incidents by creating SLA triggers.
    Create a Data Loss Prevention Incident Response SLA definition
    Outline the conditions and duration for responding to data breaches by creating Data Loss Prevention Incident Response SLA definitions.
    Create an Application in Proofpoint and Obtain Client Credentials
    Create an application in Proofpoint and configure the required settings to obtain client credentials. These credentials enable secure access to the Proofpoint API for seamless integration and automation.
    Install and configure the Proofpoint integration for Data Loss Prevention
    Install and configure the Proofpoint integration to use the  Proofpoint DLP incident data to investigate DLP incidents.

    Activation information

    Install Data Loss Prevention Incident Response by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Security Operations common functionality
    The Security Support Common plugin is activated when any of the plugins for the main Security Operations applications (Security Incident Response, Vulnerability Response, Threat Intelligence, or Configuration Compliance) are activated.