Threat Levels
CSAP users can now use the threat level indicator feature to indicate the current level of malicious cyber activity and reflect the potential/actual damage caused by the threats. Threat levels are determined and communicated to members based on the specific organization's security requirements. Security teams can determine and update threat levels based on various parameters such as likely damage due to the threat, target of the threat, preventive measures that are in place, and other crucial data such as lethality and criticality of the threat.
Before you Start
You must have the View and Create/Update permissions for the Threat Levels feature.
Map Threat Levels
To map threat levels with threat type and threat criteria, do the following.
Navigate to Management > Settings > Alert Settings > Threat Levels.
Select Types and click Create.
Enter a name for the threat type. For example, Critical Vulnerability.
Click Create.
Switch to Criteria and click Create.
Enter a name and description for the criteria. For example, Critical Threat.
Click Create.
Switch to Levels and click Create.
Enter a unique name and description for the threat level.
Select criteria from the list and click Create.