Recipient Group
Members are categorized into recipient groups for the targeted sharing of information.
What is a Recipient Group?
A recipient group is a group of members who receive information in the form of alerts, Doc Library media, Knowledge Base articles and others, based on their grouping. For example, an alert based on a particular malware targeting the finance department of an organization may be sent to the Finance & Accounts recipient group of an organization. Similarly, the best security practices alert can be sent to all recipient groups within the organization. A member can be a part of multiple recipient groups.
Types of Recipient Groups
Public Groups: These recipient groups are open to all members for the purpose of receiving targeted alerts based on their role in the organization. While onboarding, CSAP members can select public groups (they can change their choice later in the Member Portal profile settings).
Note
Public groups can be activated or deactivated by the CSAP administrator.
Invite-Only Groups: These recipient groups are created by analysts to meet the functional requirements of an organization. Privileged users can create a required number of invite-only groups and a member may be included in multiple invite-only groups. However, invite-only groups can only be controlled by the privileged users and members will not be given the option to request or add themselves to these groups.
System Groups: A predefined set of recipient groups created for the purpose of sending targeted alerts. For example, all survey requests can be tagged to the Survey Managers system group. Users in these groups can be modified.
Note
The All Users system group is available to all CSAP users irrespective of other recipient groups assigned to them.
Create Recipient Group
Analysts can create public recipient groups and invite-only recipient groups for members.
Before you Start
Ensure that you have the View, Create, and Update permissions to create recipient groups.
Steps
To create a recipient group, follow these steps:
Sign in to the Analyst Portal and click Administration.
Click Settings > Core Settings > Recipient Groups > Invite Only Groups or Public Groups, and click Create.
Group Name: Enter a name for the recipient group. For example, Information Security Officers.
Group Description: Enter a description to provide user details about the group and its functions.
(Optional) Group TLP: Select a Traffic Light Protocol (TLP) for the recipient group. The TLP is a set of designations that ensures sensitive information is correctly shared with the appropriate recipients. There are four categories in the TLP version 1.0 protocol and five categories in the TLP version 2.0 protocol. While creating alerts, you can select recipient groups based on a particular TLP while adding recipients for an alert.
Note
Alerts tagged with higher TLP cannot be published to recipient groups that are lower in the TLP hierarchy.
(Optional) Group Type: If you select Public, the recipient group is visible and accessible to all members.
If you select Invite Only, members can only join the recipient group by invitation or an approved request to join. The following additional options are available for invite-only groups:
Closed Group: A closed group is not visible to members who have not been added to it. Members cannot request to join the recipient group.
Request to Join Group: The recipient group is visible to all members on the Member Portal. Members can request to join the recipient group.
Select the checkboxes for features you want to enable for the recipient group. The features include access to Knowledge Base, intel reports, Messenger, Doc Library, Survey, Member Directory, RFI, Threat Defender Library (content viewing and creation), and Collaboration (content viewing and editing). To select these features, ensure they are enabled in Configurations. For more information, see Configure CSAP Features.
Note
Permissions to access Collaborate Member Portal features are assigned to members based on all the recipient groups the member belongs to. For example, if a member belongs to two or more recipient groups, the features configured for all the recipient groups are available to the member.
(Optional) Auto-publish Cyware advisory alerts to this group: Select the checkbox to automatically deliver Cyware advisory alerts from selected alert tags. By default, this checkbox is clear. After selecting this checkbox, you see the following options:
(Optional) Alert Tags: Add multiple tags and categories for receiving alerts.
Auto-publish Type: Select if the Cyware advisory alerts are sent with or without notifications.
Auto-publish alerts without notification: Members will not receive any notifications for the alerts.
Auto-publish alerts with notification: Alerts published by Cyware with push notification enabled will be delivered to members with both mobile app and email notifications.
Select checkboxes for mobile app and email notifications according to your preference. These options are deactivated if you choose to auto-deliver all alerts without notification.
(Optional) Allowed Member Submissions: Select whether members of this recipient group can directly share intel and RFI with other members of this recipient group. This allows you to limit members' ability to share intel and RFIs within the group, ensuring appropriate information distribution. By default, both Intel Submission and Request For Information are selected. This permission only applies when automatic publishing of intel or RFI is enabled in Configuration. For more information, see Configure Member Submission Preferences.
To select RFI for member submission, ensure that the feature is enabled. For more information, see Configure CSAP Features.
Note
Ensure that the Active toggle is turned on to make the recipient group available in Collaborate.
After making the changes, click Create. You can now share information with the recipient group.
Create Groupsets for Recipient Groups
A groupset is a set of many recipient groups. Use groupsets to send alerts to multiple recipient groups simultaneously and reduce the time taken to disseminate information through alerts.
Steps
To create a groupset, do the following:
Navigate to Recipient Groups > Groupset and click Create in the upper-right corner.
Enter a name and description for the groupset.
Add recipient groups to the groupset. You can select recipient groups from the Public Groups, Invite Only Group, or System Group fields, or type recipient group names into the corresponding text fields.
Note
Ensure that the Active toggle is turned on to make the groupset available while creating alerts.
After making the changes, click Create.
Add Members to Recipient Groups
To add members to a recipient group, do the following:
Navigate to Recipient Groups and choose the recipient group type (Invite Only or System).
Hover over the recipient group to which you want to add members, click the vertical ellipses and select Member Management.
In the Members not in this group section, select the checkbox for members you want to add to the recipient group. You can filter member email IDs by city, country, location, member role, organization type, organization, recipient group and state.
After selecting the checkboxes, click > to move the members to the Members in this group section. This means the members are now added to the recipient group.
Remove Members from Recipient Groups
To add members to a recipient group, do the following:
Navigate to Recipient Groups and choose the recipient group type (Invite Only or System).
Hover over the recipient group to which you want to add members, click the vertical ellipses and select Member Management.
In the Members not in this group section, select the checkbox for members you want to remove from the recipient group. You can filter member email IDs by city, country, location, member role, organization type, organization, recipient group and state.
After selecting the checkboxes, click < to move the members to the Members in this group section. This means the members are now removed from the recipient group.
Clone a Recipient Group
To clone a recipient group, follow these steps:
Go to Recipient Groups and select the recipient group type.
Note
You can only clone Invite Only Groups, Public Groups, or Groupset.
Hover over the recipient group to which you want to clone, click the vertical ellipses, and select Clone Group. Follow the procedure to Create Recipient Group and fill in the required details.
The newly cloned group will inherit the group TLP, status, feature permissions, and auto-delivery of alert preferences from its parent group. Additionally, members of the parent group will be automatically included in the cloned group.
You can modify the details of the cloned recipient group based on your preference.
Note
Ensure the Active toggle is turned on to make the cloned recipient group available in Collaborate.
After making the changes, click Create. The recipient group is now cloned. For more information about adding members to the recipient group, see Add Members to Recipient Groups.
Modify Recipient Group Details
You can modify the recipient groups details such as name, description, TLP and more.
Steps
To modify the details of a recipient group, do the following:
Navigate to Recipient Groups and choose the recipient group type (Invite Only, System, Public, or Groupset).
Hover over the recipient group you want to edit, click the vertical ellipsis, and click Edit.