[Music] chris walker your security doctor back again for another exciting seasonal sec bite session and today we're going to ask the question how can you build a catalog item in the security incident catalog anybody have the answer if not stay tuned because i'm going to show you how to do this in five yes five easy steps to achieve a custom catalog item within the security incident catalog so let's go ahead and get after it now of course when we think about catalog items catalog items actually exist everywhere personal and professional life in our dvds if you still have those our cds our vhs tapes how you categorize those those become records and those records can be cataloged through a series of different ways you produce those particular entities so with that let's go ahead and get right into the agenda first and foremost what is the security instant catalog i need to know this chris it's very important to the success of this overall demonstration second record producer versus catalog item there's a difference we'll talk about it last but not least let's build it five easy steps before we get into the fun side i did have one quick joke how did the beaver configure his servicenow instance he just logged in get it i'll stick to my job all right welcome back we are in my instance our second topic of agenda was understanding what a security incident catalog is and really it's just a series of items to request or submit various types of security focus categories as shown here on my screen it's very similar to when we add items to our amazon prime shopping cart i'm guilty for that i've got about 15 items in there but this is how we build off of the category builder and then we can produce a series of actions to fulfill those requests or submissions next let's talk about the record producer which is a specific type of catalog item that allows users to create task-based records such as an incident record versus a catalog item which in this case is just a way to publish a service to your users you can add a description images and maybe even a workflow to determine the approval or chain of command to fulfill those processes for those catalog items [Music] all right let's get building this is the exciting part of the entire sec bytes demonstration so for today's demonstration we are going to be focusing on creating the record the catalog item with its category as well as producing a security incident record from that submission so let's go ahead and get right after it first and foremost we need to create that record so you guessed it we're going to type in record producers this is going to now give us the opportunity to create that new record producer so up here in the upper right hand corner we have the new button when you click that it's going to generate this form now there's a couple of different things that need to be filled out i'm going to walk you step by step this is step one going through the actual form making sure we have everything selected and populated before we move into adding our image and our descriptions and then of course testing out the final end result so first and foremost we need to fill out the name in this case i've used privacy escalation as that naming convention we also need to select the right table because we're generating a security incident from that user submission we need to make sure that we're associating it with the right table so i've gone ahead and scoped that out as well now once we've filled out everything at the bottom you'll have a submit button you guessed it it'll submit it save it now it's committed and now we're going to go into step three which will allow us to add our variables or our questions so i'm going to show you what that looks like so as the beginning step one let's create the record step two make sure we've filled out all these appropriate fields so i'm going to walk you through those steps step two is going to make sure that we have filled out not only our short description but if there is a description we'd like to add in here maybe some images knowledge based articles links internal resources maybe a video there are a lot of different opportunities for your catalog builders or your analysts to actually go through and produce this information but what's most important is making sure that we have associated the catalog as well as the category now to do so all you need to do is select that specific catalog you can use the look up list you'll see a series of different catalogs security incident catalog is already there because again it is out of the box which is amazing and then the second part is to associate your category so all you're going to do is select your left click list you'll see existing categories now if you don't see one that really fits this particular name create one which is what i did so i went ahead and clicked my lookup list and then i went ahead and selected new and from there created my own category so it's entirely up to you on what you want to do there for the purposes of this demo i created a brand new category so i could showcase that now as we look down to the bottom we see we have a couple of different options these tabs are going to give us the ability to do a number of different series of actions but most importantly we're going to be talking about step three which is our variables now variables come in many flavors when we mix those flavors we present the customer with a series of questions or options my favorite flavor by the way is chocolate chip we'd love to know what yours is put it in the comments below if you want in any case back to variables we have a couple of different questions here that we can pre-define or we can define ourselves so there's a lot of different types that are available out of the box i'm going to show you very quickly what that looks like again we want to make sure that we keep this video a little more condensed but i'm going to show you what that new variable record will look like here we have it this is our different types that we can use so we could prompt questions like yes or no we could do a select box maybe the requested four so we have that field um populated there we could do maybe a custom with a label there's a number of different things or simply adding an attachment right that could be an option on our form so there's a lot of different things you can do in here i will provide links in the description so you can see the terminology and the definition of what those will actually entail and then of course you can enter in what the question is that you're prompting to the end user so that way they'll know exactly how to fill out this particular submission now that we have that all set up everything looks good perfect of course we need to go ahead and save this record and we've saved our record everything is up to date perfect step four is adding an image now to do that we want to go ahead and look at the specific catalog item in our categories so here i'm in my categories i'm going to go to the privacy incident category that i've created and notice it brings me to the category section so now this is where i can actually add in any additional descriptions i'd like when i click into the specific catalog item and then of course i also want to add maybe a nice little image right so we would add it to the desktop image and just as an faq a lot of questions asked what's the resolution 100 by 100 seems to play very nicely within my instance that is what i suggest everything else should be left by default for the widget and i will explain that at the end but this would be step four making sure we have an image look at the description and everything else looks good here perfect so now that that's done we're gonna go ahead and save this category record so that looks good now step five let's add it and then generate that security incident record so we're gonna go back into our catalog and that's simply by typing in catalog here security incident catalog is populated you'll notice it's not here where is it privacy escalation looking for you up up here in the upper right hand corner is the add content button this is where i can add that additional widget when i click on this now you'll notice privacy incident is a catalog option and i'm going to go ahead and select the default category details because i want my end users to know what this is about when they're submitting this particular issue so i'm going to add it over to the right hand side and you'll notice it's perfect the uniformity the consistency all the angles everything looks smooth looks great and we're done that was step five super simple super easy now when we go into the actual privacy incident we can see here we have our privacy escalation when we click into that we can see all the information is being populated and pulled in because we've conditioned it that way through the variables so there's a lot of different ways you can maneuver and manipulate this entirely up to you and how you build this out but this is a great use case example to show you how you can start to categorize and also ask for user import right describing the current issues what's my level of prioritization and then of course attaching any screenshots so i'm going to go ahead and just put in some test text here and i'm going to go ahead and also add a attachment and from here i'm going to go ahead and hit submit and you'll notice that once that's done i now get a message indicating that the security incident requirement is contacted and we have our business impact and we see our security incident record has been successfully not only created and generated but assigned to waldo and with that thank you so much for allowing me to do what i love to do i hope to see you very soon stay tuned for more content don't forget to like and subscribe and of course add any comments or questions you might have as always stay safe