Statuses of events and incidents enable the application to show the progression of information processing by the ICS security officer.
The following statuses can be assigned to events and incidents:
This status is assigned to all events and incidents when they are registered in Kaspersky Industrial CyberSecurity for Networks.
You can assign this status to events and incidents that are currently being processed (in progress), for example, when investigating the reasons for registration of these events and incidents.
You can assign this status to events and incidents that have already been processed (for example, investigation of the reasons for their registration is complete).
Events and incidents with a status of Resolved assigned to them are not taken into account by the application when determining the security states of devices displayed in the devices table and on the network interactions map.
The statuses of events and incidents are changed manually. You can sequentially assign statuses in the order from New to Resolved (however, you are not required to assign an intermediate In progress status). After the status of an event or incident is changed, you cannot assign the previous status to it.
Page top