[Music] hey everyone it's Justin thank you for watching and welcome to my house that's Justin's house in this video I'm continuing my explanation of data loss prevention incident response in the previous video I'll include a link up above right there I did basically an overview of the workspace and we pulled up or I pulled up a data loss prevention incident and went through some of the various features and actions that you can take on the data loss prevention incident so today I want to talk about the assessment piece I found this part really intriguing if we hop over to the all menu here I showed this at the end of my last video but under Administration we have assessments and I'll show you how this assessment gets assigned to somebody to complete but notice in My Demo environment I've got no assessment so I'm going to have to create one and I thought well what better thing to do then do it with you so let's create an assessment I'm going to click the new button and it's going to create a record in the service now I did a little kind of dry run even though I said this is the first time just to make sure I don't stumble too hard and this little record I'm just going to call it demo assessment for YouTube trying to look underneath my lighting there and we'll just keep the description the same and I won't do any introduction but other than welcome to your assessment um spelling is important and I could select different fields from the actual assessment so if we wanted to include some information about the data loss prevention incident or DLP incident match content the number okay the number sounds good and the policy name okay we know the policy names were that PCI pii I'll just put that not there but we'll put it here and then let's see what else we've got resolution notes so yeah probably at some point scan machine seen before source file subject okay that sounds like maybe a short description so let's just take that down there and make sure there's nothing else okay that looks good enough for our welcome and that'll give us a sense of what this looks like uh when we actually do that so I'm going to go ahead and I'm going to click submit and like I said this is going to create a record and then I can open this record for the demo assessment for you Kevin Spacey winning an Academy Award Kevin Spacey won for his performance in American Beauty by the way you have a new notification do you want to hear it no thank you I'm going to keep that part in because then you know what my life is like I don't know what I did to set off the a word above my head but they responded so what I was trying to say is this creates a record and when you have this record created we can come in and click on the assessment designer so the assessment designer if your assistant admin should look a little familiar to you um it was there up before but now it's going to refresh that if you've ever done form design on a servicenow forum this has like kind of the same look and feel although it functions a little bit different so let's just start off I'm going to try every single one of these on this assessment so we see what they all look like so I'm going to drag attachment over here so the controls over there on the left hand side I'm going to drag that over there and let's just see what our options are for attachment I could have the new attachment we'll just say attach your evidence here or something like that I'm making it up uh actually let's leave that as new attachment I just realized the question is there please attach any evidence here and then we won't make it mandatory uh I won't put any details other than demo looks like we got an option to do dependency okay so maybe this functions for um our our UI controls uh so I'm not gonna do any dependencies but good to know that we can maybe show something if they answer true or false or something actually let's try that out so we'll do a Boolean next Boolean true or false we'll change the settings on this to um is this uh shoot I'll call this um uh first time I guess first time will be the name of it is this the first time this happened question mark and uh we should know that already but we're just doing this for demo we're going to leave this as a check box or we'll do the yes and no uh We're not gonna allow not applicable because I'm going to use that for a dependency in my details we don't really need any details on that and so let's go for our dependency if they choose yes um so we're going to make that dependent on the field before it was is this the first time that's happened and it is yes then we're going to show this and we're going to say that it's mandatory and we are going to allow additional information that's always good additional information uh we'll leave the label there uh allow not applicable okay here's our choices so let's just leave Choice one two and three just for demo there and that'll save us some time as we're editing the video as well oh I left the name as new Choice um let's change the question too so they said is this the first time that's happened uh and if they say yes it's the first time that's happened um we can say um what's uh what do you think uh is the issue let them pick from a list of options okay so I'm just making this up as I go along all right so we've got our choice in there let's plop a date in there and new date we'll leave that as dates and then we'll say what date did this occur a question mark we'll just leave all that there because we already did a dependency we've got daytime that's beautiful same as date so I'll leave that a number okay we could see what a number of fields looks like percentage we could see what that looks like scale that should be interesting so in an assessment we might want to look at the scale and we could see please I say scale scale rating and rate the um rate desensitivity of the information that was in your file um or a period not a question mark and then we'll do scale and I'm assuming yeah so we can actually modify the scale here so uh ooh a b or c we'll change that to um confidential or sensitive versus non-sensitive so we'll get some choices there um public information how about that public information so public information sensitive or confidential they get to provide that I'm going to just do a good measure there and hit save if you've used servicenow for a minute just know that it's in a web browser and you're doing stuff so anything can happen including loser internet connection um or you're recording numeric scale zero one two three four five so let's just take a look at that we could say let's just leave new numeric scale Max minus zero Max is five allow not applicable and allow additional information okay sure and let's just close that one and then we can do a string value we should know what a string is uh template no but let's do pull in a reference and for reference let's reference the location the little say what's your location so this will be a location what is your location question mark and then we'll pull in this field cannot be empty but it's not popping up I clicked twice okay there we go it should pop up I'm only going to click once there we go and we'll choose location I think it CMM underscore location um it it should be CMM underscore location no matches found okay so let's just go location it is C oh cmn CMS Mary Nancy okay so there we go They're gonna pull in the location I don't want any details there and then last image scale uh okay so that could be like frowny face sad face um I'd have to put up an image for every single one of those so let's spare you all that that looks like a cool option but I don't want to do that and that'll take too much time multiple selection we could do and let's just change the choices here to uh green and then yellow and red save that and then ranking okay so this is cool so you can give them a list of things to rank and there's my settings for it and there's my choices for them to rank so we'll just say how are we going to rank um uh your rank your concern um what is your concern about the third party um mishandling the um the information or rank your concern I guess not what is your concern rank your concerned um and then we'll say post on social media or they might share it with an um non-qualified investors making stuff up here and then the last one will be um post to face no not already just social media um give to journalists for news story all right God knows what we've leaked here I'm gonna hit save and uh okay so we've got an assessment set up I'm gonna hit save and publish on this and then or just publish and that should be give us the ability to hop back into our workspace let's go back here uh that was the DLP assessment so we're going to go over to the data loss prevention management workspace let's just pull up a data loss prevention incident and when we assign that to the end user what I want to do is go ahead and Associate that assessment with this so I did this in the last video this is a data loss prevention incident that you're going to see on the screen now and I'm going to use this assign incident button here at the top to get access to that assessment so we're going to go assign it to the end user I'm going to attach the assessment we've got a template here for a demo assessment for YouTube and then we're going to say it's been responded to once they complete the assessment so we'll assign that and this should tell us exactly who this goes to this was actually reported so it was assigned to Stella Piper if you can see it right here oh that's interesting this is the first one I've seen that has the file permissions that came in and the one that I clicked up and the one I pulled up in the previous time I didn't have any file permissions in there so okay this is the sign to sell a piper so let's log in as Stella Piper and uh while I'm logging in and impersonating her one of the things that data loss prevention incident response gives us is an end user portal so there's the data loss prevention management workspace there's the operations for DLP workspace you'll see those here if I click on not platform analytics workspace what the heck um I didn't want that where is my workspace menu That's oh let's go here DLP let's go dop okay so you're not going to see them all here but there's a DLP end user portal which really between you and me looks like the workspace that we were in just before but it's only the stuff that's been assigned to this person so there's that application file access and I think I did number six number one is when I was messing around with just to see what this end user portal with looked like but this has got the demo assessment for YouTube so we'll dive into the end user portal in a future video but I want to see what this assessment looks like for the users that come in here so here's the welcome notice it has that policy name at the top and subject is blank so obviously I picked the wrong field there for the a subject but if they did need to see anything you can actually see behind me there's details about the actual data loss incident but let's go ahead and pull up that our assessment again okay here's where they can attach some evidence I get a modal there to attach something first time it happened now remember if I hit yes it should ask me for a choice there's Choice one two and three if I had no that should go away okay so that's working and it's mandatory and they can provide additional information around that so that's pretty cool this is a little nice experience I haven't seen before the date that it occurred we'll just say it occurred on the 1st of December the new number oh that's right we put a number in so let's put in five we put in a percent we'll put a hundred percent this were just so we could see what the fields looked like rate this entity of rate the sensitivity of the information that was in your file so we could say hey it was sensitive versus public or versus confidential so you get to radio buttons numeric scale okay so pick on a scale from zero to five let's pick three we could put some additional information in there and then let's just put it on the string I'm a ring what's my location now remember I referenced the cmn location table so let's see what comes up here it's searching searching searching notice I've got a three ellipses up here in addition to the little search thing that's going on there that's already gone away but let's see if there's anybody out in San Diego um there we go San Diego Eastgate Mall is going to be the location there's our multiple selection for a green yellow red let's select them all and then rank your concern about the third party missing oh look at this so I can move that around oh that's neat and then it put numbers to it automatically okay so now if I want to give to journalists oh I'm really concerned they're going to give it to a journalist that is pretty cool so it numbered them automatically based on me dragging them that okay this is by far my favorite assessment feature I've seen so far in this particular application we'll hit submit and the last thing I'll do before we close out the video oh that's nice your responsive has been submitted okay I clicked My Stream deck and it did something there but let's get out of Stella and go back in as myself so I'm going to end impersonation and I just want to see on the flip side what that assessment response looks like in the workspace so let's jump back into the workspace it doesn't take me there it didn't take me there so we'll go to the operations for DLP management and I know I didn't pull this up in my previous video but I should be able to get into assessments from here well that's pending assessments it's definitely not pending let's see if we can get rid of our states there all right there's the one that was responded so that DLP six it was assigned to Justin but it was assigned to end user Stella before oh and look notice it did update the state as we configured to responded and then came back to Justin who actually did the assignment here's the data loss prevents an incident inside the workspace now and unlike in the first video when I clicked assessments now I should be able to see an assessment let's open that assessment okay good we get the same experience that the end user had that was a nice clean assessment not like the ones I've seen in the past so they can come in here and can they change it oh wow that's interesting um that should be read only don't you think let me know what you think in the comments I think that should be a a read-only edit or view of that assessment maybe because I'm an admin I don't know I can mess around some permissions later but that is DLP Assessments in servicenow data loss prevention incident response application I hope you found this video helpful I hope you enjoyed me putting together an assessment on the fly if you did please like Please Subscribe or share it with somebody who you think might be interested in giving users giving analysts or giving someone an assessment about a data loss incident while it's happening or as the the response to that data loss incident until next time don't forget to always be learning [Music]