User Activity Insight Rules

Rules for the User Activity Insight are created to analyze data extracted for the User Activity Insight. When the extracted data violates a User Activity Insight rule,  IRC reports a violation.

To create an User Activity Insight rule:

  1. Add information on the General Information panel as explained below.
  2. Provide the risk description, control objective and assign owners for the rule.
  3. Specify the users to be notified when violations are reported against this rule.
  4. Click the Conditions tab.
  5. Provide the rule conditions
  6. Click Save to save the rule. The rule now appears in the list of rules for the selected rule book.
    Note: Click Enable Notification to notify users via email about the events relevant to this task.

    Provide details for the new rule in the following panels: