Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Viewing Incidents and Reports > Viewing the incident list > Managing incident workflow > Changing incident severity
Changing incident severity
Administrator Help | Forcepoint DLP | Version 8.7.x
The incident's severity setting is a measure of how important it is to the organization that this incident is handled. The severity of an incident is automatically decided by Forcepoint DLP. This calculation takes both the prescribed severity of the incident and the number of matched violations into account.
Incident severity is displayed in the incident list. There is a column for severity. In addition, when you select an incident, its severity is displayed in the incident details. To change the severity of an incident:
1.
Select one or more incidents. Note that if you want to apply the action to all the filtered incidents, there is no need to make any selections.
2.
From the toolbar, select Workflow > Change Severity.
3.
Select a new severity from the menu.
4.
Select a Change Severity option:
*
Select Selected incidents to change the severity of only the incidents you selected in the list.
*
Select All filtered incidents to change the severity of all filtered incidents in the list.
5.
Click OK.
Possible severities include:
 
Icon
Definition
High. This breach is significant and may have a broad impact on the organization.
Medium. This breach is moderate and should be reviewed.
Low. This breach is insignificant.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Viewing Incidents and Reports > Viewing the incident list > Managing incident workflow > Changing incident severity
Copyright 2020 Forcepoint. All rights reserved.