Zoom 3 of 3 — line
Security Alert Triage
Transactional line · Information Technology · Cybersecurity Operations
Runs when: Runs transactional. Starts when a request lands in the queue.
3384
units a week
83%
touchless
7
stations
7.0h
timetable
7.4h
actual
+6%
vs timetable
Station walk
Every stage, who owns it, and what is sitting there
Each station names the agent that runs it and the layer it belongs to. more
- 01
Ingest
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 48msla 82mqueued 37 - 02
Enrich
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 135msla 158mqueued 28 - 03
Score
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 185msla 393mqueued 22 - 04
Auto-close false positive
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 161msla 324mqueued 0 - 05
Contain in-policy
AI GBS AI GBS depotrun by Alert Triage Agent
dwell 21msla 37mqueued 36 - 06
Analyst review
Policyrun by Director, Security Operations
Gate: Held for a named human when the unit exceeds the alert decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
approver Director, Security Operations
dwell 268msla 544mqueued 3 - 07
Escalate incident
Policyrun by Director, Security Operations
Gate: Held for a named human when the unit exceeds the alert decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
approver Director, Security Operations
dwell 371msla 683mqueued 6
Live trains on this line
7 units in motion right now
| Ref | Work | Held by | Value | Status | Age / SLA |
|---|---|---|---|---|---|
| IT7A-1004 | Alert at score Victor Ellery | AI-OPS spine gbs | $25k | In flight | 3h 14m / 6h 33m |
| IT7A-1011 | Alert at contain in-policy Amara Novak | AI-OPS spine gbs | $81k | In flight | 50m / 37m |
| IT7A-1017 | Alert at escalate incident Ines Ito | Alert Triage Agent agent | $14k | Evidence posted | 3h 53m / 11h 23m |
| IT7A-1026 | Alert at auto-close false positive Ethan Novak | AI-OPS spine gbs | $7k | In flight | 4h 55m / 5h 24m |
| IT7A-1030 | Alert at ingest Pierre Lindqvist | AI-OPS spine gbs | $80k | In flight | 1h 36m / 1h 22m |
| IT7A-1039 | Alert at auto-close false positive Oscar Petrov | AI-OPS spine gbs | $53k | In flight | 4h 24m / 5h 24m |
| IT7A-1046 | Alert at analyst review Wren Nakamura | Director, Security Operations human | $79k | Human hold | 10h 45m / 9h 4m |