DLP Incident Response overview

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • Learn how you can use the ServiceNow AI Platform and the Data Loss Prevention Incident Response (DLP IR) application. Manage sensitive information for your customers, such as the financial and proprietary data, health records, or social security numbers. Automate the remediation workflows with the DLP Incident Response application.

    Data Loss Prevention Incident Response and the ServiceNow AI Platform

    How the information flows with the DLP application.
    This is how the information flows with the DLP application. This is a clickable image map, so you can trying clicking on the different sections.This is a clickable image, so you can trying clicking on the different sections to learn more about DLPDLP Admin tasks - This is a clickable image, so you can trying clicking on the different sections to learn more about DLPUsing the DLP End User portal - This is a clickable image, so you can trying clicking on the different sections to learn more about DLPUsing DLP Ops Portal - This is a clickable image, so you can trying clicking on the different sections to learn more about DLPUsing DLP dashboard – This is a clickable image, so you can trying clicking on the different sections to learn more about DLP
    The Data Loss Prevention Incident Response application includes the following capabilities:
    • An end user workspace where your end users or employees can review and respond to the assigned DLP incidents.
    • A manager workspace where a manager can review the escalated DLP incidents and act on them appropriately.
    • A unified workspace where your DLP operations team can track the trends on the open incidents, top offenders, incidents by scan source, and can view, edit, assign, and close the DLP incidents across multiple sources (endpoints, networks, and email).
    • Administrative controls that define the email templates for end-user coaching and communication, assignment rules for automatic assignment of incidents, auto-escalation rules, and delegation for incident responses.