Threat Assessment
Threat assessment can be used to quickly get a pulse of how many members are impacted by a vulnerability, malware, or threat activity. Analysts can post threat assessment questions with multiple response options along with any alerts published to members. Based on the recipient's response to an alert, analysts can extract a consolidated report to assess the sector-wide impact.
Threat assessment questions and answers created from this section can be added to alerts published from the CSAP Analyst Portal. Only active threat assessments can be tagged to alerts published from the CSAP Analyst Portal.
Create Threat Assessment Template
You can create threat assessment templates and use them to quickly attach threat assessment questions to an alert.
Before you Start
You must have the Create/Update permissions for the Threat Assessment module to create and manage threat assessment templates.
Steps
To create a threat assessment template, do the following.
Navigate to Management > Settings > Alert Settings > Threat Assessment and click Create.
Enter a unique name for the threat assessment template. For example, Patch Assessment.
Enter the questions for the threat assessment template. For example, Have you patched this vulnerability?
You enter answer choice for the threat assessment questions and create multiple-choice questions for your threat assessment.
Make sure to activate the template using Active/Inactive and click Create.
Note
Privileged users can map threat assessments using their names to appropriate alerts in order to display them in the CSAP Member Portal. Member responses can be extracted from the Reports section.
Update Threat Assessment Template
You can update the details of existing threat assessment templates and manage preferences.
Before you Start
You must have the Create/Update permissions for the Threat Assessment module to create and manage threat assessment templates.
Steps
To update the threat assessment template, do the following.
Navigate to Management > Settings > Alert Settings > Threat Assessment.
Hover over the threat assessment template to update and click Edit.
Make changes to the template. See Create Threat Assessment Template
Make sure to activate the template using Active/Inactive and click Update.
Search and Filter Threat Assessment Template
You can search and filter SLA from the list. Click Filter to open the search bar and directly search using a keyword.