Threat Assessment SLA
SLAs allow analysts to send automatic reminders at the specified time interval to members for responding to threat assessments. Privileged users can map SLAs using the SLA name to appropriate Threat Assessments in order to send response reminders. You can configure up to three intervals to send reminders to members for responding to a threat assessment.
Note
Only active SLAs can be tagged to threat assessments published from the CSAP Analyst Portal.
Create Threat Assessment SLA
To create a threat assessment SLA, do the following.
Navigate to Management > Settings > Alert Settings > Threat Assessment > SLA.
Click the Create button to create a new SLA.
Provide a name for the SLA.
Define the SLA Threshold for your SLA. The threshold will send reminders to the recipients at the defined time intervals. Consider a scenario where SLA 1 = 10 minutes, SLA 2 = 20 minutes, and SLA 3 = 30 minutes.
SLA 1: Threat assessment recipients will receive the first reminder after 10 minutes from the time of receiving the alert.
SLA 2: Threat Assessment recipients will receive the second reminder after 20 minutes from the time of receiving the alert.
SLA 3: Threat Assessment recipients will receive the third reminder after 30 minutes from the time of receiving the alert.
Determine the status of the SLA (Active, Inactive) via the toggle switch at the top right of the screen.
After finishing, click Create.
Update Threat Assessment SLA
To update the threat assessment SLA, do the following.
Navigate to Management > Settings > Alert Settings > Threat Assessment > SLA.
Hover over the SLA to modify and click Edit.
Make required changes to the SLA. See Create Threat Assessment SLA
Make sure to activate the threat assessment SLA using Active/Inactive and click Update.
Search and Filter Threat Assessment SLA
You can search and filter SLA from the list. Click Filter to open the search bar and directly search using a keyword.