Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 462

Table of Contents

Advertisement

Role: Users can be assigned to one or more Roles for example, Analyst, Admin and so on.
Manual steps in the workflow processes can be assigned to a Role.
Sentinel 6 workflows have four major components that are unique to iTRAC:
Step: A Step is an individual unit of work within a workflow; there are manual steps, decision
steps, command steps, mail steps, and activity-based steps. Each step displays as an icon within
a given workflow template.
Transition: A Transition defines how the workflow will move from one state (Activity) to
another and can be determined by an analyst action, by the value of a variable or by the amount
of time elapsed.
Templates: A Template is a design for a workflow that controls the execution of a process in
Sentinel iTRAC. The template consists of a network of manual and automated steps, activities
and criteria for transition between them. Workflow templates define how to respond to an
incident when a process based on that template is instantiated. A template can be associated
with many incidents.
Processes: A process is a specific instance of a workflow template that is actively being
tracked by the workflow system. It includes all the relevant information relating to the instance,
including the current step in the workflow, the associated incident, and the results of the steps,
attachments and notes. Each workflow process is associated with one and only one incident.
Figure A-15
Reporting Service
The Reporting service allows for reporting, including historical and vulnerability reports. Sentinel
comes with out-of-the-box reports and enables users to configure their own reports using Crystal
Reports. Some examples of reports included with Sentinel are:
Trend analysis
Security status of lines of business or critical assets
Attack types
Targeted assets
Response times and resolution
Policy compliance violations
462 Sentinel 6.1 User Guide
iTRAC Workflow

Advertisement

Table of Contents
loading

This manual is also suitable for:

Sentinel 6.1 sp2

Table of Contents