Loading
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            AI Agent for Security Incident Management

            You are here:

            1. Salesforce Help
            2. Docs
            3. Agentforce IT Service

            AI Agent for Security Incident Management

            Security Assistance is a conversational specialized AI agent that helps employees report security incidents and manage security compliance. Use this agent to report phishing attempts and potential breaches, enroll in mandatory security training, and request exceptions to corporate security policies. This agent supports an organizational security posture.

            Required Editions

            Available in: Lightning Experience
            Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service.

            Service Catalog Items

            This specialized agent automatically uses these SCI templates to fulfill your request. You can configure additional service catalog item templates to support similar applications and request types.

            • Report Phishing Email
            • Report a Security Vulnerability
            • Request Security Policy Exception
            • Report Device Security Incident
            • Enroll User in Security Training

            Agent Actions

            These actions run automatically during your conversation with the specialized agent.

            • Answer Questions with Knowledge
            • Get Eligible Service Catalog Items
            • Execute Service Catalog Item Flow
            • Get Product Launch Card
            • Create Incident For Employee
            Example
            Example

            Reporting a suspected phishing email

            Scenario: Employee Anna received a suspicious email claiming to be from IT support asking for her password.

            • Anna: I just got a suspicious email asking me to verify my password by clicking a link. It looks like phishing.
            • AI Agent: Good catch on identifying that suspicious email. I can help you report it. To confirm before I proceed, can you forward that email to security@company.com and let me know the sender's email address?
            • Anna: The sender is it-support-team@companyhelp.net—that's not our real domain, right?
            • AI Agent: Correct, that's not our legitimate domain. Security incident INC-009876 has been created to investigate this phishing attempt. The security team will analyze the email and block the sender domain. Never click links or provide credentials in unsolicited emails. Your account has been flagged for extra monitoring for the next 72 hours as a precaution.
             
            Loading
            Salesforce Help | Article