Create response tasks

After a security incident has been created, response tasks are then created to track separate actions to be performed to respond to the security issue.

Before you begin

Role required: sn_si.admin

Procedure

  1. Navigate to the appropriate location to open the security incident for which you want to create tasks. For example:
    • To create a response task based on a security incident assigned to you, select Security Incident > Response Tasks > Assigned to Me.
    • To create a response task based on a security incident assigned to your team, select Security Incident > Response Tasks > Assigned to Team > Incidents.
    • To create a response task based on an unassigned security incident, select Security Incident > Incidents > Unassigned Incidents.
  2. Open the security incident for which you want to add response tasks.
  3. Either click the Add Response Task button in the form header or the Add Response Task related link.
  4. Fill in the fields on the form, as appropriate.
    Table 1. Security incident
    Field Description
    Number [Read only] The automatically-generated security incident response number.
    Parent [Read only] The number of the related security incident.
    Configuration item The configuration item (resource) affected by the security issue.
    Note: To save time, you can also click the Copy CI from Incident button to bring the Affected Resource information from the related security incident.
    Priority Select the priority used to determine when this task should be performed.
    State The current state of the security response task. Upon task creation, this field defaults to Draft.
    Skills Click the lock icon and select the skill required to perform this task. After you have completed your selections, click the lock icon again.
    Assignment group The assignment group from which the assigned worker will be selected.
    Assigned to The individual assigned to perform the task.
    Short description

    A description of the security incident response task.

    Description Enter a description for the selected task.
    Work notes Enter work notes that will not be visible to the customer.
    Additional comments Enter any comments that you want to be visible to the customer.
  5. When you have completed your entries, click Submit.
    Note: After you have created security incident response tasks, you can view them using any of the following applications under the Security Incident module:
    • Assigned to Me > Response Tasks.
    • Assigned to Team > Response Tasks.
    • Unassigned > Response Tasks.