Event statuses

Statuses of events and incidents enable the application to show the progression of information processing by the ICS security officer.

The following statuses can be assigned to events and incidents:

• New

  This status is assigned to all events and incidents when they are registered in Kaspersky Industrial CyberSecurity for Networks.

• In progress

  You can assign this status to events and incidents that are currently being processed (in progress), for example, when investigating the reasons for registration of these events and incidents.

• Resolved

  You can assign this status to events and incidents that have already been processed (for example, investigation of the reasons for their registration is complete).

  After the Resolved status is assigned, events and incidents with this status are not taken into account by the application when determining the security states of devices displayed in the devices table and on the network interactions map.

The statuses of events and incidents are changed manually. You can sequentially assign statuses in order from the New status to the Resolved status (however, you are not required to assign the intermediate In progress status). After the status of an event or incident is changed, you cannot assign the previous status to it.