>
    Strata Copilot
    Customize the Incident Categories
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. Data Security Administration
    4. Assess Incidents on Data Security
    5. Customize the Incident Categories
    Download PDF
    SaaS Security

    Customize the Incident Categories

    Table of Contents

    Customize the Incident Categories

    Add custom incident categories on Data Security for Open or Closed states to help filter incidents and track changes.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Data Security license
    Or any of the following licenses that include the Data Security license:
    • CASB-X
    • CASB-PA
    Assigning an incident category to a policy violation allows you to filter and view incidents by category on Data Security. You assign incident categories when you:
    Data Security has two states:
    • Open
    • Closed
    Within these two states are incident categories, and Data Security provides some default categories that suit most organizations’ incident management processes. By default, all incidents are Open and categorized as New. You cannot delete or rename default categories, but you can create new ones.
    1. Map out the customize categories that your organization requires.
      This planning is essential because you cannot delete or rename custom categories.
    2. Verify that you have the required permissions.
      You must be an administrator with a Super Admin role or an Admin with access to all apps to create new categories.
    3. Log in to Strata Cloud Manager.
    4. Select ConfigurationSaaS SecuritySettingsWorkflow SettingsIncident State and Categories.
      If the field is not accessible, you do not have the required permissions to create a custom incident category.
      1. Enter a Category Name and select Open or Closed state.
      2. To create additional new categories, Add Category.
      3. Save your changes.
      4. Your custom category is an option when you Modify Incident Status or Close Incidents.

    © 2026 Palo Alto Networks, Inc. All rights reserved.