The triage service is part of our incident response process. It ensures that critical alerts are handled immediately and provides the response team with the information needed for investigation. It also reduces the number of false alarms, so the team can concentrate on real issues.
What the service covers
- PrioritisationWe filter and rank security alerts; critical ones are handled first.
- Severity analysisWe assess the severity of each alert and its potential impact.
- Root causeWe support the response team in establishing the cause of the incident.
- ReportingWe produce incident reports with the actions taken.
- Continuous improvementWe periodically review the triage rules to increase their effectiveness.