deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-07-03 11:13:50 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update tvm-remediation.md

Browse Source
This commit is contained in:
Dulce Montemayor
2019-10-29 00:35:02 -07:00
committed by GitHub
parent 560854b159
commit 1feac787a4
1 changed files with 10 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md
View File

@ -47,7 +47,6 @@ When you submit a remediation request from Threat & Vulnerability Management, it
It creates a security task which will be tracked in Threat & Vulnerability Management **Remediation** page, and it also creates a remediation ticket in Microsoft Intune. It creates a security task which will be tracked in Threat & Vulnerability Management **Remediation** page, and it also creates a remediation ticket in Microsoft Intune.
You also have the option to export all remediation activity data to CSV for records, reporting purposes, or if you want to notify your IT administration counterpart that a remediation ticket has been submitted.
The dashboard will show that status of your top remediation activities. Click any of the entries and it will take you to the **Remediation** page. You can mark the remediation activity as completed after the IT administration team remediates the task. The dashboard will show that status of your top remediation activities. Click any of the entries and it will take you to the **Remediation** page. You can mark the remediation activity as completed after the IT administration team remediates the task.
@ -63,11 +62,11 @@ Select **Exception options** and a flyout screen opens.
### Exception justification ### Exception justification
If the security recommendation stemmed from a false positive report, or if there are existing business justification that blocks the remediation, such as compensating control, productivity needs, compliance, or if there's already a planned remediation grace period, you can file an exception and indicate the reason. If the security recommendation stemmed from a false positive report, or if there are existing business justification that blocks the remediation, such as compensating control, productivity needs, compliance, or if there's already a planned remediation grace period, you can file an exception and indicate the reason.
- Compensating/alternate control - A 3rd party control that mitigates this recommendation exists, for example, if Network Firewall - - prevents access to a machine, third party antivirus - **Compensating/alternate control** - A 3rd party control that mitigates this recommendation exists, for example, if Network Firewall - - prevents access to a machine, third party antivirus
- Productivity/business need - Remediation will impact productivity or interrupt business-critical workflow - **Productivity/business need** - Remediation will impact productivity or interrupt business-critical workflow
- Accept risk - Poses low risk and/or implementing a compensating control is too expensive - **Accept risk** - Poses low risk and/or implementing a compensating control is too expensive
- Planned remediation (grace) - Already planned but is awaiting execution or authorization - **Planned remediation (grace)** - Already planned but is awaiting execution or authorization
- Other - False positive - **Other** - False positive
![Screenshot of exception reason dropdown menu](images/tvm-exception-dropdown.png) ![Screenshot of exception reason dropdown menu](images/tvm-exception-dropdown.png)
@ -79,12 +78,12 @@ However, you also have the option to filter your view based on exception justifi
### Actions on exceptions ### Actions on exceptions
- Cancel - You can cancel the exceptions you've filed any time - Cancel - You can cancel the exceptions you've filed any time
- Resurface - The exception that you've filed automatically becomes void and resurfaces in the security recommendation section when dynamic environmental factors change, which adversely affect the exposure impact associated with a recommendation that had previously been excluded - Resurface - Your exception automatically becomes void and resurfaces in the security recommendation list when dynamic environmental factors change, which adversely affect the exposure impact associated with a recommendation that had previously been excluded
### Exception status ### Exception status
- Cancelled - The exception has been cancelled and is no longer in effect - **Cancelled** - The exception has been cancelled and is no longer in effect
- Expired - The exception that you've filed is no longer in effect - **Expired** - The exception that you've filed is no longer in effect
- In effect - The exception that you've filed is in progress - **In effect** - The exception that you've filed is in progress
## Related topics ## Related topics
- [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) - [Risk-based Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md)