Understanding the Incident Information List

The Incident Information screen displays a list of incidents manageable for the reviewer. Incident reviewers can use this screen to do the following:

  • View incident summary

  • Take actions on incidents

  • Export incident details

Table 1. Incident Information List

Item

Description

ID

Unique incident ID

Received

Date and time when Control Manager received incident data

Note:

After receiving DLP logs from managed products, Control Manager needs 30 minutes to process the logs before incident reviewers can view the data.

Severity

Severity level of the incident

Note:

Once Control Manager receives and processes a DLP incident, Control Manager does not update the severity level if changes occur in the managed product.

Policy

Name of the Control Manager policy that triggered the incident

Note:

For incidents triggering DLP policies created in managed products, this appears as N/A.

User

Name of the user who triggered the incident

Manager

Name of the user’s manager

Status

Current status of the incident

  • New

  • Under Investigation

  • Escalated

  • Closed

Action

Action available for managing the incident