Setting Incident Notifications

Setting Incident Notifications

Incidents

This feature allows users to customize their alert preferences based on the severity level of incidents: Low and higher, Moderate and higher, or High only. When an incident matches the selected severity level, users are promptly notified via a portal message, and optionally, through email. 

Both the email and portal notifications include a direct link to the detected incident for quick access. The number of users receiving alerts can be specified in the Organization Settings. By default, no users receive notifications or emails unless configured otherwise.

User roles

This feature is available for Org Admins and IT Admins. Any TSFA user can add/delete other users from the Settings table.

Setting Incident Notifications

  1. Log into an Org as Org Admin or IT Admin. 
  2. Go to the top right corner of the Portal, click on the arrow icon, and then select Organization Settings.
  3. Select the Incident Notification tab.
  4. Press Add Users button. 
  5. Check the box next to the organization users for whom you wish to configure the alert preferences.
  6. Click Save.
  7. By default, the Severity level assigned is Moderate.

To modify Severity Levels

  1. Check the box next to the organization users for whom you wish to modify the alert preferences.
  2. Select another Severity Level from the dropdown list under Severity Assigned.
  3. Click Save.

To receive email notifications

  1. Check the box next to the organization users for whom you wish to add email notifications.
  2. Click Save.

To remove users

  1. Check the box next to the organization user(s) to exclude from the notifications.
  2. Click Save. User(s) will stop receiving the notifications.

Changing Severity Settings in Bulk

  1. Follow steps 1 to 3 from Setting Incident Notifications section.
  2. Select one or more users from the table.
  3. Click Severity Settings.
  4. Set the Severity Level.
  5. Optional: check the box to enable users to receive notifications via email.
  6. Click Apply. 

    • Related Articles

    • Viewing and Setting Incident Severity Levels

      About Incident Severity Each incident, issue, or event on ThinkShield Firmware Assurance (TSFA) is assigned a Severity Level, which indicates the level of importance and suggests potential actions needed for a specific device. These severity levels ...

    • Viewing Incidents Report

      To access this report, navigate to the Incidents section. Here, you'll find a comprehensive list of all recorded incidents, including any issues or errors identified based on criteria set by the IT Admin. Incidents are a specific type of event that ...

    • About Events and Incidents

      This document provides a structured overview of key security-related incidents logged by ThinkShield Firmware Assurance. Events are categorized based on their nature, severity, and potential impact. Each event includes a brief description, its ...

    • Using the Dashboard

      The Dashboard displays data from the entire fleet of devices through various graphs, bar charts, and visual elements, helping users quickly grasp trends and key metrics. As the landing page, it is the first interface users see when accessing the ...

    • Running On-demand Measurements

      This feature introduces the ability to perform on-demand measurements on the device, run the measurement (verify firmware integrity) of each component, and display the latest logs on the Cloud UI. It also enables a two-step attestation of ...