Project

General

Profile

Feature #6547

Provide means (e.g. GUI button) to decline/reject an event remediation.

Added by Randy Reitz over 5 years ago. Updated about 5 years ago.

Status:
Closed
Priority:
Normal
Start date:
06/24/2014
Due date:
% Done:

100%

Estimated time:
4.00 h
Spent time:
Duration:

Description

Tissue events can be remediated by anyone. The remediation consists of selecting one of the remediation actions and adding an optional comment.
If the event remediation does not need approval, then the event state will change to closed. Any network blocks will be removed by FBI.

However, if an event is for a detector/issue which is configured for remediation approval, someone with the "Security Admin" role will
need to approve the remediation. The only choice on the "processRemediations" page is to approve.

The customer has request another button to decline/reject the remediation. An email will be sent to the remediation submitter indicating the
rejection and any comment entered.

Requested by Greg Cisko.

Greg_Cisko_Tissue_request.pdf (35.1 KB) Greg_Cisko_Tissue_request.pdf Greg's email Randy Reitz, 06/24/2014 03:57 PM

History

#1 Updated by Lauri Carpenter about 5 years ago

  • Status changed from New to Closed
  • Assignee set to Lauri Carpenter
  • % Done changed from 0 to 100
  • Estimated time set to 4.00 h


Also available in: Atom PDF