gitpod-io / observability

MIT License
8 stars 5 forks source link

Create custom field on Incident.io incident that we can use for security related incidents #42

Closed mads-hartmann closed 2 years ago

mads-hartmann commented 2 years ago

For providing evidence for SOC2 we need a way to find incidents that are related to security. We want to use a custom fields for this.

mads-hartmann commented 2 years ago

I have added a "Security Incident" custom field in incident.io and marked is as required before you can close an incident.

This is what is looks like when you try to close an incident (notice it is marked as required, I tried to submit with providing a value)

Screenshot 2021-12-01 at 13 42 42

It is implemented as a single-select Yes/No

Screenshot 2021-12-01 at 13 42 48

Here is a screenshot of what it looks like for an individual incident.

Screenshot 2021-12-01 at 13 46 08

You can then filter for only Security incidents at https://app.incident.io/incidents (see screenshot)

Screenshot 2021-12-01 at 13 48 37

And then export the CSV - this is how we'd provide evidence of all critical security incidents.

@meysholdt I'm marking this as done. Please reopen if you feel otherwise.