Add Threat Assessment
Use threat assessments to get a pulse of how many members were impacted by a vulnerability, malware, or threat activity. Add threat assessment questions with response options along with an alert and publish them to members. You can also use pre-configured templates for threat assessments to save time. Based on the response provided by alert recipients, analysts can extract a consolidated report to assess the sector-wide impact. Threat assessment questions appear on top of the alert content in the CSAP Member Portal. You can include service-level agreements (SLAs) for threat assessments to send automatic reminders to members at specified intervals to respond to the assessment.
Before you Start
Add recipients to the alert.
Configure required threat assessment settings such as templates and SLAs. To know more about this, see Threat Assessment.
Add Threat Assessments from Templates
You can select threat assessments from pre-configured templates and attach them to your alert. This saves you time from entering repetitive data. To create pre-configured threat assessment templates, see Threat Assessment.
Steps
To add threat assessment from a template, follow these steps:
In the alert creation form, click Threat Assessment.
Turn on the Would you like to add threat assessment to this Alert? toggle and use the following information:
Select the template for the threat assessment, in the Choose from pre-configured threat assessment templates dropdown.
Edit the template to your preference. You can either have single-select or text-based questions for the assessment.
Select recipients for the threat assessment. The list is displayed based on your recipient selection in Recipients.
To review the location and organization filters you applied when selecting recipients, expand Additional Filters.
Choose a preconfigured SLA using the drop-down list. SLAs allow you to send automatic reminders at specified time intervals to members for responding to threat assessments. See Threat Assessment SLA.
The next step is to recommend actions to members. To know more about this, see Recommend Actions to Members.
Create a Threat Assessment
To create a threat assessment for the alert, follow these steps:
In the alert creation form, click Threat Assessment.
Turn on the Would you like to add threat assessment to this Alert? toggle and use the following information:
Click Create New and select a threat assessment type and an appropriate title for the assessment.
Choose the type of assessment questions. You can either have single-select or text questions for the assessment.
Choose a time of expiry for the threat assessment. Members cannot respond to an expired threat assessment.
Select recipients for the threat assessment. The list is displayed based on your recipient selection in Recipients.
To review the location and organization filters you applied when selecting recipients, expand Additional Filters.
Choose a preconfigured SLA using the drop-down list. SLAs allow you to send automatic reminders at specified time intervals to members for responding to threat assessments. See Threat Assessment SLA.
The next step is to recommend actions to members. To know more about this, see Recommend Actions to Members.