Setting Up Incidents

Setting Up Incidents

This feature lets users customize alert preferences by incident severity: Low and higher, Moderate and higher, or High only. When an incident meets the selected severity, users are notified via a portal message and, optionally, email.

Both notifications include a direct link to the incident for quick access. The number of users receiving alerts can be set in Organization Settings > TSFA Settings. By default, no users receive notifications or emails until configured.

Notes
This feature is available for Org Admins and IT Admins. Any TSFA user can add/delete other users from the Settings table.

Setting Up Incident Notifications

  1. Log into an Org as Org Admin or IT Admin. 
  2. From the top drop-down menu select Configuration & Settings.
  3. In the left panel, go to Organization Settings > TSFA Settings.
  4. Open the Incident Notifications tab.
  5. Click Add Users button. 
  6. Check the box next to the organization users you want to configure alerts for.
  7. Click Save.
  8. By default, the Severity level assigned is Moderate.

Modifying Severity Levels

  1. Check the box next to the organization users whose alert preferences you want to update.
  2. Choose a new Severity Level from the dropdown list under Severity Assigned.
  3. Click Save.

Receiving Email Notifications

  1. Check the box next to the organization for whom you want to add email notifications. 
  2. Click Save.

Removing users

  1. Check the box next to the organization user(s) to exclude from notifications.
  2. Click Save. User(s) will stop receiving the notifications.

Changing Severity Settings in Bulk

  1. Follow steps 1 to 3 in Setting Incident Notifications section.
  2. Select one or more users from the table.
  3. Click Severity Settings.
  4. Set the Severity Level.
  5. Optional: select the check the box to enable email notifications.
  6. Click Apply.

    • Related Articles

    • Setting Up Organization Accounts

      Accessing Your Account When your organization's portal is created, a single administrative account will be created. The IT Owner (Org Admin) specified to Lenovo at the time of sale will receive a Lenovo Device Orchestration (LDO) e-mail indicating ...

    • About Incident Severity

      Each incident, issue, or event in ThinkShield Firmware Assurance (TSFA) is assigned a Severity Level, indicating its importance and suggesting potential actions for the affected device. Severity levels help administrators prioritize issues for ...

    • Using the Prevalence Model

      To enhance security visibility, the TSFA system uses a Prevalence Model to identify rare device events. It effectively detects anomalies such as outlier firmware updates, BIOS password changes, or long-inactive devices—helping identify potential ...

    • Setting Up User Preferences

      Settings Tab The Settings tab allows you to customize your settings. Here, you can: Language: Select your preferred language from the drop-down list. Daily Email Summary: Use the toggle button to enable or disable daily snapshots of the previous ...

    • Setting Up LDO ServiceNow Integration

      Prerequisites Before configuring the integration between LDO and ServiceNow, ensure the following prerequisites are met to establish proper synchronization: Terminology Alignment In LDO, a physical device (such as a laptop, desktop, or server) is ...