Data Loss Prevention

can we automate the analysis of the incident  like which incident should be dismissed and which incident should be further investigated and what incedents are resolved . can we automatically track the status of the incident ???

Hi Deta,

You can dismissed the incidents which are false postives and escalate which looks genuine or true postive. It all depends on your bussiness stakeholder and information security policy and nature of data, I would suggest to follow below thereat for more infomation

https://www-secure.symantec.com/connect/forums/symantec-dlp-incident-workflow-incident-management

https://www-secure.symantec.com/connect/forums/dlp-incident-handling-methods

https://www-secure.symantec.com/connect/forums/incident-management