Configuring settings for managing security incidents


As an administrator, you must configure settings to manage security incidents in the Ticket Console.

Before you begin

As a  administrator, you must install  and integrate it with .


Settings for security incidents

Configure the following settings to manage security incidents in the Ticket Console:

Action

Configuration setting

To display the Security Incident option in the Incident Type menu

You do not have to perform any configuration settings. This option is available by default.

To filter the security incidents

You can filter the security incidents by using the My Security Incidents predefined filter or the Security Tickets filter in the Ticket Console.

To display the filters, you must add and enable the showSecurityTickets configuration parameter. For more information, see Setting configuration parameters in BMC Helix ITSM.

Note: You can also distinguish the security incidents from regular incidents by thesmartit_securityincidents_filtericon.jpg icon that is displayed for security incidents. This icon is displayed only when you open a security incident, but not on the Dashboard where all the incidents are displayed.

To auto assign security incidents

For the assignment feature to work in , the administrator must configure and enable the auto assignment functionality in . For more information, see Configuring assignments

.

To display matching categories

For the following options to display matching categories, you must modify them by selecting the Security Incident option under Application Modules > Service Support Modules > Incident Management.

  • Operational Category
  • Product Category
  • Resolution Category
  • Resolution Product Category

For more information, see:


Instructions for classic interfaces

View instructions for Mid Tier

As an administrator, you must configure settings to manage security incidents in the

Some content is unavailable due to permissions.

Console.

Before you begin

As an administrator, install BMC Helix Multi-Cloud Service Management 20.02 and integrate it with .

Settings for security incidents

Configure the following settings to manage security incidents in the

Some content is unavailable due to permissions.

Console:

Action

Configuration setting

To display the Security Incident option in the Incident Type menu

You do not have to perform any configuration settings. This option is available by default.

To filter the security incidents

On the Incident Basics and Assignment tab, click More Filters to display the More Filter Criteria pop-up window. From the Incident Type drop-down menu, select Security Incident. For more information, see Navigating-the-ticket-console.

To auto assign security incidents

Configure and enable the auto assignment functionality. For more information, see Configuring assignments.

To display matching categories

Select Application Modules > Service Support Modules > Incident Management, and select Security Incident. Then, modify the following options:

  • Operational Category
  • Product Category
  • Resolution Category
  • Resolution Product Category

For more information, see Configuring product catalog information and Configuring operational catalogs.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*