Detecting Security Changes and Creating Related Cases - PAS ICS Integrity - 7.3 - Administration & Configuration - Intergraph

ICS Integrity Administration Guide

Language
English
Product
PAS ICS Integrity
Subproduct
ICS
Search by Category
Administration & Configuration
PAS Version
7.3

The PAS Workflows asset model provides the Create MOC Cases for Security Changes sequence definition. You schedule this sequence definition through the Admin Utility to run once a day and automatically detect and create cases for the unreconciled changes. Each time this sequence runs, it checks to see if the last import time of each asset has passed the specified time delay interval. If the specified number of days have passed since the last import time, Integrity performs the following tasks:

  • Groups the objects of the unreconciled security changes by location

  • Creates a workflow case per location and attaches the objects as associated assets.

  • Sends an email to the owner of the monitored system to notify that owner of the workflow case created for reconciling the changes.

To schedule the Create MOC Cases for Security Changes sequence:

  1. In the Admin Utility, click the Schedules link under Initial Setup.

  2. On the Schedules tab, click Add.

  3. On the General tab, type the Schedule Name.

  4. On the Sequences tab, select the MOC asset from the Asset list.

  5. In Definitions, click Create MOC Cases for Security Changes, and then click the right arrow (>) button to add the selected definition to the Sequence list.

  6. On the Schedule tab, configure when and how often to run the sequence, such as once a day.

  7. Click OK to save.