Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 03:42:47 UTC

USB device policy seems too restrictive for design team

TKT-0013 Low Awaiting Customer Policy Change
Created By
p.thomas
Created
2026-10-03 08:01
Last Updated
2026-10-04 12:22
Assigned Analyst
Sarah Chen
Category
Policy Change
Messages
7

Conversation

p.thomas Customer
2026-10-03 08:01
We'd like to request a change to our security policy:

USB device policy seems too restrictive for design team

Please let us know if this is feasible and what the security implications would be.
Sarah Chen SOC Analyst
2026-10-03 10:47
Good news — our analysis confirms this is a true positive. We've implemented the containment measures and will send a full incident summary within 24 hours.
p.thomas Customer
2026-10-03 13:55
That's reassuring. Can we schedule a call to discuss the remediation steps?
Sarah Chen SOC Analyst
2026-10-03 15:30
Good news — our analysis confirms this is a true positive. We've implemented the containment measures and will send a full incident summary within 24 hours.
p.thomas Customer
2026-10-03 16:13
The affected user has confirmed they changed their password. Can you verify MFA is active?
Sarah Chen SOC Analyst
2026-10-03 17:42
I've updated the DLP policy as requested. The HR shared drive is now excluded from the external transfer monitoring rule, but internal audit logging remains active.
p.thomas Customer
2026-10-03 18:29
Understood. Is there anything we need to do on our end in the meantime?

Reply