[rtir] incident priorities

James Mcloughlin jamesm at csirt.ja.net
Mon Nov 2 05:22:08 EST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 02/11/15 09:30, Marius Urkis wrote:

> While working on fresh RTIR install came to some dilemma – how to 
> implement incident prioritization properly. Incident queue do have 
> priority CF, but I don’t see any functionality tied with it.
> Probably it is possible to do it by using SLA extension by
> assigning different timing requirements to the appropriate incident
> criticality but not sure how it is practical in all cases.
> 
> Could you share how do you implement that in your installations?

Here at Janet, initial incident prioritisation is flat.
All initial incidents are created equal, and are priority is
determined by the order that they arrive. They are assigned a due time
according to our SLA.

Essentially, it is "First Come, First Served"

Jamie

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlY3OUYACgkQpEsRb6ksC3+ylACdHFOa68Qg/Q1Jl+TiZ3IuuW8t
6/MAn1ON5uh6Xn/mIaHHqNyDSqOPHeQz
=GSyh
-----END PGP SIGNATURE-----


More information about the rtir mailing list