McAfee Data Loss Prevention 9.2.2 Product Guide

8Working8with casesCase management allows users to collaborate in the resolution of related incidents.Cases are used to manage incidents through stages of resolution. When a case is resolved, it is closed.When significant incidents are found and reported by the McAfee DLP system, they generally have oneor more attributes in common. Assigning incidents with common properties to a single case allowsusers to collaborate to resolve them more quickly. Each staff member involved can focus on a singleaspect to advance the resolution of the case.For example, a case that contains emailed evidence might be assigned to members of a legal team,who might develop it so that it can be used in court. Each member of that team might add notes andcitations, change status and priority, notify stakeholders, or redirect the case to another user whomight be able to add information.Case dashboards display information based on organizational responsibilities. For example, HumanResources personnel might see Acceptable Use violations, but not SOX compliance issues.ContentsTypical scenarioManage case permissionsAdd, delete, or save casesModify casesCustomize casesTypical scenarioCases can be used to resolve groups of related incidents. A typical use case follows.Resolve credit card violations using a caseIf you collect credit card violations in a case, you can resolve Payment Card Industry violations in asingle operation.Before you beginA privacy policy that contains credit card rules must be installed and activated. When therules run, violations are found and reported to the Incidents dashboard. They can then beadded to the case.McAfee Data Loss Prevention 9.2.2 Product Guide 189