Changing incident severity

Administrator Help | Forcepoint DLP | Version 8.4.x

The incident's severity setting is a measure of how important it is to the organization that this incident is handled. The severity of an incident is automatically decided by Forcepoint DLP. This calculation takes both the prescribed severity of the incident and the number of matched violations into account.

Incident severity is displayed in the incident list. There is a column for severity. In addition, when you select an incident, its severity is displayed in the incident details. To change the severity of an incident:

Select the incident.

From the toolbar, select Workflow > Change Severity.

Select a new severity from the menu.

Possible severities include:


Icon	Definition
	High. This breach is significant and may have a broad impact on the organization.
	Medium. This breach is moderate and should be reviewed.
	Low. This breach is insignificant.