Add incident policy

As a Kisi admin, you can set up incident policies to monitor specific conditions, receive real-time notifications, and enable proactive responses, ensuring swift action and review of security events. Currently, you can choose from the following incident policy types:

• Door Held Open: Receive alerts when a door remains open beyond a specified time. Notifications will continue at set intervals until the door is closed, ensuring that any potential security issues are addressed promptly.
• Impossible Travel: Get notified when access events occur in locations that are geographically too distant to be realistically covered by the same user within the given timeframe.
• Hardware Outage: Alerts for hardware malfunctions or failures that impact security operations.

1. Sign in to Kisi
2. On your left sidebar, click he Incidents icon
3. Select the Incident Policies tab
4. Click on Add Incident Policy
5. Enable the Enable Policy toggle
6. Define the name of your new incident policy, e.g. "Door held open @ the New York office"
7. Open the Select Type dropdown and select the incident policy type you want to configure. Currently, there are three types available: Held Open, Impossible Travel, Hardware Outage
8. Open the Severity dropdown and select the incident policy severity level. You can choose from: Info, Warning, and Critical
9. Under Instructions, you can provide guidance to your team for handling the incident, e.g. "Acknowledge the incident and assign it to the person responsible for checking the door. Ensure the door is closed and investigate the cause. Close the incident if no security breach is found, or escalate as needed."
10. Next, specify the individuals to be notified when this particular incident occurs by adding their email addresses
11. As a last step, click on the email address(es) to define if the user should be notified via email, web or mobile push notification
12. Click Add

info

Kisi only sends outage alerts for devices that experience a WAN uptime drop below 50% for more than five consecutive minutes. Once a device is back online, you will receive a recovery alert.

Delete an incident policy

If an incident policy is no longer needed, as a Kisi admin you can either temporarily disable it or permanently delete it.

1. Sign in to Kisi
2. Navigate to Incidents
3. Select the Incident Policies tab
4. Select the incident policy you wish to disable or delete from the list
5. Depending on your preference, either turn off the Enable Policy toggle, or click on Delete to permanently remove it