After a security incident has been created, you can create response tasks to track separate actions to be performed to respond to the security issue.

Before you begin

Role required: sn_si.basic

Procedure

  1. Navigate to the appropriate location to open the security incident for which you want to create tasks.
    For example:
    • To create a response task based on a security incident assigned to you, select Security Incident > Incidents > Assigned to Me.
    • To create a response task based on a security incident assigned to your team, select Security Incident > Incidents > Assigned to Team > Incidents.
    • To create a response task based on an unassigned security incident, select Security Incident > Incidents > Unassigned Incidents.
  2. Open the security incident for which you want to add response tasks.
  3. Click the Add Response Task button in the form header.
    Note: To create any other task, click the Tasks tab in the incident Related List.
  4. Fill in the fields on the form, as appropriate.
    Table 1. Security incident
    FieldDescription
    Select security tag If you set up and activated security tags, you can select one or more tags to add metadata to the record or specify the degree of sensitivity of the response task.

    If you did not set up or activate security tags, this drop-down list is not displayed.
    Number [Read only] The automatically generated Security Incident Response number.
    Parent [Read only] The number of the related security incident.
    Configuration Item The configuration item (resource) affected by the security issue.
    Affected User The person affected by the security issue.
    Priority The priority used to determine when this task is performed.
    State The current state of the security response task. Upon task creation, this field defaults to Draft.
    Skills The skill required to perform this task. Click the lock icon and select the skill required. After you have completed your selections, click the lock icon again.
    Assignment group The assignment group from which the assigned worker is selected.
    Assigned to The individual assigned to perform the task.
    Short description

    A description of the Security Incident Response task.
    Description A description for the selected task.
    Secure notes The work notes that are encrypted and not visible to the customer.
    Work notes The work notes that are not visible to the customer.
    Additional comments Comments that you want to be visible to the customer.
  5. When you have completed your entries, click Submit.
    Note: After you have created Security Incident Response tasks, you can view them using any of the following applications under the Response Tasks module:
    • Assigned to Me.
    • Assigned to Team.
    • Show Open Tasks
    • Show All Tasks
    • Unassigned Tasks.