Create custom states for your DLP incidents

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • Create and configure your own custom states for the DLP IR incidents.

    Before you begin

    Role required:
    • sn_dlir.admin - Create, edit, and delete.
    • sn_dlir.analyst and sn_dlir.analyst_read - View (read-only).

    About this task

    By default, the Data Loss Prevention Incident Response application provides you the following states:
    • Closed
    • Open
    • In Review
    • Escalated
    • Overdue
    • Responded
    • Draft
    • Reported

    You can select one of the default states or your custom states based on the DLP incidents.

    Procedure

    1. Navigate to All > DLP Administration > Custom States.
    2. To create a custom state, click New.
    3. In the State field, enter a name for the custom state.
    4. Click Submit.