IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  edit "Remedy Diary" notes / remove PII from notes

    Posted Tue April 07, 2020 03:16 PM

    Is there a way to edit "Remedy Diary" notes? A user entered PII (SSN) into the record and we need to delete the restricted data from the system.

     

    Anita Mixon, CRISC, CISM, PMP

    NextEra Energy, Inc

    Senior Compliance Analyst – Data Privacy

    Compliance & Responsibility Organization

    Mailstop: IA/JB (C4254)

    561-304-5897 (office)

    neecro

     



  • 2.  RE: edit "Remedy Diary" notes / remove PII from notes

    Posted Thu April 09, 2020 09:41 AM
    Hey @Anita Mixon, what are you referring to by "Remedy Diary" in Resilient?​​

    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------

    Original Message


  • 3.  RE: edit "Remedy Diary" notes / remove PII from notes

    Posted Fri April 24, 2020 10:45 AM
    Hi @Anita Mixon,
    It sounds like your looking for a way to scan identify and remove PII from notes on Resilient. Is that correct ? 
    If so we may have a community app on AppX that can get you half way there. 
    We have a Google DLP integration which allows you to submit a string of text to the Google DLP service either or identify/report on any found PII or to find and obscure PII.
    It only works on artifacts and attachments so you may have to define a new workflow to get it working with Notes. 

    Heres a link, let me know if this is helpful. 
    https://exchange.xforce.ibmcloud.com/hub/extension/9b35caccb0c7387a78223538d48388e2 
    ​

    ------------------------------
    Ryan Gordon
    Security Software Engineer
    IBM
    ------------------------------

    Original Message


Related Content