Skip to main content

Cyware Fusion and Threat Response

Create Action

To perform a security-related task, create an action in CFTR and assign a security analyst to perform the task. 

Before you Start

Ensure that you have Create/Update permission for the Action module.

Steps

To create an action in CFTR, do the following:

  1. On the top app bar, click New and select Action.

  2. In Title, enter a title for the action.

  3. Under Summary, add the following details. Fields marked with asterisks (*) are mandatory and must be entered to create an action in the Open state.

    Note

    The fields for creating actions might differ based on the form configured by the administrator in Form Management > Action.

    • Description: Describe the details of the action to be performed.

    • Priority: Priority is disabled and CFTR automatically assigns a priority after you create an action in the Open state based on the details entered in other fields of the action. The available priorities are:

      • Very Low

      • Low

      • Medium

      • High

      • Very High

    • Assigned Group*: Assign a CFTR user group to the action. Only CFTR users from the selected user group can be assigned to the action, after creating the action.

    • Action Type: Select the type of action to be performed, such as:

      • Containment

      • Corrective

      • Eradication

      • Mitigation

      • Recovery

      • Remediation

  4. To categorize the action, select the appropriate labels from Labels.

  5. To save the details, click one of the following:

    • Save as Draft: Creates the action with Draft status.

      Note

      Any CFTR user with View permission to Actions can update the draft actions. Draft actions can be deleted.

    • Submit: Creates the action with Open status.

CFTR creates the action with Draft or Open status and assigns a unique ID, for example, #ACT123. You can access the action from Menu > Actions.