Workflow capability matrix

Application
security6 areas

SAST and DAST managementSecret scanningSecurity & IT Application vulnerability scanningSecurity & IT Configuration and dependency managementSecurity & IT Suggest code fixSecurity

Security reviewsCode ownershipSecurity

Cloud
security7 areas

Cloud risk managementSystem hardeningSecurity Managing configuration driftSecurity & IT

Cloud alert managementCloud alertsSecurity

Cloud alert remediationModify visibility settingsSecurity

Cloud workload managementSystem rollbackSecurity & IT Backup proceduresSecurity Infrastructure failoverSecurity

IT service delivery
and support27 areas

Systems monitoring and alertingIssue creationIT Issue routingIT

Incident and problem managementStandard issue formatIT Related issuesIT Issue closureIT Trend escalationSecurity & IT Chat alertsIT War room creationIT

Endpoint managementHardware tracking / asset inventoryIT Device provisioningIT Device isolationSecurity & IT Device deprovisioningIT Performance monitoringIT

Request fulfilmentSelf service capabilitiesIT Web form interactionIT Chatbot interactionIT Request routingIT Approval workflowsIT Software licence managementIT SLA trackingIT Status tracking of requestsIT

IAMLogging / audit trailSecurity & IT Zero trust / least accessIT Provisioning / deprovisioning usersSecurity & IT MFAIT Centralized IDIT RBACSecurity & IT

Governance, risk
and compliance8 areas

Policy management and educationTraining assignmentSecurity Send training remindersSecurity DashboardingSecurity

Detecting and remediating violationsApplication execution policySecurity User assessmentSecurity Asset assessmentSecurity

Compliance evidence collectionChange managementSecurity & IT Logging / audit trailSecurity & IT

Networking13 areas

Network incident responseNetwork anomaly detectionSecurity & IT Packet analysisSecurity & IT Network data collectionSecurity & IT

Network access managementVPN access provisioningSecurity & IT Just In Time network accessSecurity & IT Device network accessSecurity & IT

Network change managementIPAM orchestrationIT Firewall / Network change approval (layer 2/3)IT Configuration drift detectionIT Network change schedulingIT

Certificate managementCertificate revocationIT Certificate deploymentIT Certificate renewalIT

Network
security8 areas

Network access controlDynamic network segmentationSecurity Firewall rule managementSecurity Certification managementSecurity

Network alert responseNetwork alertsSecurity Network traffic analysisSecurity Packet captureSecurity

Analyzing network configurationsAsset discovery scanningSecurity Network mappingSecurity

Infrastructure
management20 areas

Systems monitoring and alertingAsset and inventory managementIT Automated asset discoveryIT Capacity alertingIT Relationship mappingIT Heartbeat monitoringIT Alert ingestSecurity & IT Alert formattingIT Maintenance window managementIT Cost managementIT

Endpoint managementRun command on a deviceSecurity & IT

Capacity and availability managementResource provisioningIT Resource retirementIT High availability and fault toleranceIT Backup and recoveryIT Performance tuningIT Infrastructure as codeIT

Configuration and patch managementProduction acceptance checkIT Managing configuration driftSecurity & IT Patch managementIT System rollbackSecurity & IT

Identity and
access management17 areas

IAM alertsSecurity Organization lookupSecurity

User account managementProvisioning / deprovisioning usersSecurity & IT Update user group membershipSecurity User lookupSecurity Account suspensionSecurity

Access controlsJust-In-Time accessSecurity Permission assignmentSecurity RBACSecurity & IT

Authentication processesDisable multifactor authentication deviceSecurity Send multifactor promptSecurity Password invalidationSecurity Authentication session invalidationSecurity

Endpoint managementAsset lookupSecurity Identify assetsSecurity Asset assignmentSecurity Endpoint trackingSecurity

Threat
intelligence13 areas

Alert enrichmentBlocklist updatesSecurity IP listSecurity Domain listSecurity File hash listSecurity False positive identificationSecurity Trend escalationSecurity & IT

Threat huntingArtifact gatheringSecurity Active host processesSecurity

Analyzing IOCsFile hash analysisSecurity Domain analysisSecurity File analysisSecurity Email attribute analysisSecurity IP analysisSecurity

Application
management14 areas

Application performance and reportingIncident and problem managementIT Event managementIT Knowledgebase documentationIT

Application managementData management and storageIT Change managementSecurity & IT Configuration and dependency managementSecurity & IT Release and deployment managementIT

Application security and intelligenceRAGIT Summarize alertsIT Secure codingSecurity & IT Secret scanningSecurity & IT Application vulnerability scanningSecurity & IT Anomaly detectionSecurity & IT

Endpoint managementApplication deploymentIT

Incident
response13 areas

SIEM alertsSecurity Anomaly detectionSecurity & IT Alert ingestSecurity & IT Notify emergency resourcesSecurity End running processSecurity Run command on a deviceSecurity & IT Device isolationSecurity & IT Endpoint alertsSecurity Phishing alerts and reportsSecurity Edit email inbox rulesSecurity Block email senderSecurity Perform takedownSecurity Email deletionSecurity

Vulnerability
management4 areas

Monitoring vulnerabilitiesVulnerability identificationSecurity Vulnerability validationSecurity

Remediating vulnerabilitiesPatch rolloutSecurity Patch testingSecurity

Data loss
prevention4 areas

Data securityData classification and taggingSecurity File and network encryptionSecurity File permissionsSecurity

DLP alert enrichment and remediationBlock data transfersSecurity

Workflow capability matrix

Start building today!