Crisis Management Settings
Crisis Management is a structured information dissemination feature that allows top management executives with permission to send crisis alerts to a group of specific individuals. Crisis alerts are usually initiated in case of an emergency where the top management wants to gauge the impact of an incident. Users who receive crisis alerts can promptly respond to these alerts at the earliest possible time.
Create Crisis Management Template
Analysts can create crisis management templates from settings and quickly reduce the effort to create crisis alerts.
Before you Start
You must have the View and Update permissions for the Crisis Configuration feature.
Steps
To create a new crisis management template, do the following.
Navigate to Management > Settings > Other Settings > Crisis Management.
Click Create.
Enter a title for the crisis management template. For example, Ransomware Crisis Alert.
Enter a suitable description for the template to allow users to understand the usage of the template. For example, This template is used to send Crisis Notification alerts at time of ransomware alert crisis.
Select a TLP for the crisis management template. TLP ensures that the alert information is rightly shared with appropriate recipients.
Note
The selection of the TLP corresponds with the TLP hierarchy of the recipient groups for the alert. For example, if TLP AMBER is assigned to a crisis alert, the alert cannot be shared with recipient groups that have TLP lower in the hierarchy such as GREEN and WHITE.
Select your preference to send notifications for the template.
Mobile Push Notification: Sends a push notification for the alert to mobile devices that have installed the Cyware Enterprise Mobile app.
Email Alert: Sends an email notification to recipients.
SMS Alerts: Sends SMS alerts to recipients.
Voice Alert (Phone Call): Calls the recipients via phone to alert them about the crisis.
After finishing, click Create.
Note
Use the Create from Templates in Main Menu > Crisis Management to utilize the templates for crisis alert creation. The title and description from the template will be automatically filled into the crisis alert. CSAP will publish a crisis alert using the Crisis Notification category.
Update Crisis Management Template
You can update existing crisis management templates and make sure the details are up to date for reuse.
Before you Start
You must have the View and Update permissions for the Crisis Configuration feature.
Steps
To update an existing crisis management template, do the following.
Navigate to Management > Settings > Other Settings > Crisis Management.
Hover over the template you want to update and click Edit.
Make required changes to the template. See Create Crisis Management Template
Click Update.