Add Recipients to the Alert
Recipients are users who receive alerts created by analysts. Adding recipients is a mandatory step during alert creation. As a CSAP administrator, you can categorize members into different recipient groups for targeted sharing of alerts. For example, if there is a malware threat that is relevant to the finance team in your organization, you can configure the finance team as a recipient group and send an alert to them. A member can be associated with multiple recipient groups.
Before you Start
Configure recipient groups. To configure, see Recipient Group.
Steps
To add recipients to alerts, do the following:
In the alert creation form, click Recipients.
Note
Send alerts to recipient groups, individual recipients or both, based on your preference.
Add the alert recipients. Analysts can send an alert to multiple recipient groups at the same time. To add recipients to the alert, use one of the following methods:
By Group set: Select a group set to add the associated recipient groups. Group sets allow the association of multiple recipient groups as a collection. To create a group set, see Create Groupsets for Recipient Groups.
By Traffic Light Protocol (TLP): Select a TLP value to add the associated recipient groups. Recipient groups in CSAP are associated with a TLP classification to ensure that the alert information is rightly shared with the intended recipients.
Note
Based on the TLP you select in the Required section (Add Required Information to the Alert), you can choose the corresponding TLP for the recipient groups. For example, if you choose TLP WHITE in the Required section, you can share the alert with RED, AMBER, GREEN and WHITE recipient groups. However, if you choose TLP RED in the Required section, you can only share the alert with RED recipient groups.
By Group Type: Select a type to add the associated recipient groups. There are three types of recipient groups namely Public Groups, Invite-only Groups, and System Groups. See Recipient Group.
If you want to send alerts to individual recipients, add individual users by their email addresses in the Select Individual Recipients.
Filter recipients based on location and organization from the added recipient groups. You can filter recipients, only if you choose a recipient group or individual recipients. Use the following information to filter recipients:
Locations: Select a country or region to send the alert to members operating from the specific geographic location. Configure member locations in Member Settings.
Organizations: Select an organization or organization type to send the alert to members operating from the specific organization or sector. Configure member organizations in Member Settings.
Configure preferences to send push notifications for the alert, and initiate notifications for mobile and email alerts. You can configure push notifications, only if you choose a recipient group or individual recipients.
Select Send Push Notifications to initiate mobile and email notifications for the alert. You can also select the notification type (Mobile and Email) for specific recipient groups and individual recipients added to the alert.
Select Don't send Notification to publish the alert without sending any notification to the recipients. This blocks all notifications for the alert, regardless of other notification configurations. For example, channel-specific push notifications enabled by members get disabled for the alert.
After adding recipients, the next step is to add attachments to the alert. To know more about this, see Add Attachments to the Alert.