Close
Thank you for your feedback.

Security analyst assignment

Security analyst assignment

Depending on your settings in the Security Incident Administration configuration screen, you can assign analysts manually or using auto-assignment.

If you have a limited number of security analysts for completing requests or you simply do not want to auto-assign security analysts, you can use manual assignment.

Auto-assignment allows you to define criteria by which security analysts can be automatically assigned to security incidents and response tasks as they are created. Based on the needs of your organization, you can configure the criteria for security analyst auto-assignment in the following ways.

When auto-assignment is enabled and a security incident or response task is created, the following actions occur:

  • Available security analysts are evaluated based on the criteria defined in the configuration.
  • An appropriate security analyst is automatically assigned to the task.
  • The task is moved to the Assigned state.

If the configuration is set up to consider more than one set of criteria, such as location and skills, the security analysts are evaluated based on the weighting property settings in addition to other criteria.

If the task cannot be auto-assigned, it can be manually assigned.

Products > Security Operations > Security Incident Response; Versions > Helsinki