Zoom 3 of 3 — line
Security Alert Triage
Transactional line · Information Technology · Cybersecurity Operations
Runs when: Runs transactional. Starts when a request lands in the queue.
3384
units a week
83%
touchless
7
stations
7.0h
timetable
7.4h
actual
+6%
vs timetable
Station walk
Every stage, who owns it, and what is sitting there
Each station names the agent that runs it and the layer it belongs to. Gates name the rule and the human approver. Trains parked at a station are live units of work — click one to read its full evidence trail.
- 01
Ingest
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 48msla 82mqueued 37 - 02
Enrich
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 135msla 158mqueued 28 - 03
Score
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 185msla 393mqueued 22 - 04
Auto-close false positive
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 161msla 324mqueued 0 - 05
Contain in-policy
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 21msla 37mqueued 36 - 06
Analyst review
Policyrun by Director, Security Operations
Gate: Held for a named human when the unit exceeds the alert decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
approver Director, Security Operations
dwell 268msla 544mqueued 3 - 07
Escalate incident
Policyrun by Director, Security Operations
Gate: Held for a named human when the unit exceeds the alert decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
approver Director, Security Operations
dwell 371msla 683mqueued 6
Live trains on this line
7 units in motion right now
| Ref | Work | Held by | Value | Status | Age / SLA |
|---|---|---|---|---|---|
| IT7A-1004 | Alert at score Victor Ellery | AI-OPS spine gbs | $25k | In flight | 3h 14m / 6h 33m |
| IT7A-1011 | Alert at contain in-policy Amara Novak | AI-OPS spine gbs | $81k | In flight | 50m / 37m |
| IT7A-1017 | Alert at escalate incident Ines Ito | Alert Triage Agent agent | $14k | Evidence posted | 3h 53m / 11h 23m |
| IT7A-1026 | Alert at auto-close false positive Ethan Novak | AI-OPS spine gbs | $7k | In flight | 4h 55m / 5h 24m |
| IT7A-1030 | Alert at ingest Pierre Lindqvist | AI-OPS spine gbs | $80k | In flight | 1h 36m / 1h 22m |
| IT7A-1039 | Alert at auto-close false positive Oscar Petrov | AI-OPS spine gbs | $53k | In flight | 4h 24m / 5h 24m |
| IT7A-1046 | Alert at analyst review Wren Nakamura | Director, Security Operations human | $79k | Human hold | 10h 45m / 9h 4m |