Get started with DLP Incident Response

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • Review the following information before you start setting up your Data Loss Prevention Incident Response (DLP IR) application.

    Table 1. Checklist
    Setup task Description
    Verify that you have assigned the required ServiceNow AI Platform and DLP roles. DLP Incident Response supports the following roles:
    • The administrator (admin) installs the applications from the ServiceNow Store and assigns the DLP administrator (sn_dlir.admin).
    • sn_dlir.admin
    • sn_dlir.analyst
    Verify that the ServiceNow core applications that are required to support the Data Loss Prevention Incident Response application are installed and activated. The Data Loss Prevention Incident Response plugin (com.snc.data_loss_incident) is required to support the Data Loss Prevention Incident Response product.
    Verify that the following Security Operations applications are installed and activated from the ServiceNow Store. If not installed, install and activate one application at a time in the following order to ensure a smooth installation:
    • Data Loss Prevention Incident Response (com.snc.data_loss_incident)
    • Security Support Common

    For more information on setting up your ServiceNow AI Platform instance for the integration, see Get entitlement for a Security Operations product or application or Activate a ServiceNow Store application.
    Domain separation Verify the Domain separation and DLP Incident Response topic if you intend to separate data, processes, and administrative tasks.