1 Log into the Symantec DLP platform and navigate to the list of current incidents (Refer to “How to Access Incidents” For details on how to do this).
How To : Access Incidents
2 Click onto the incident that you wish to change the status of.
3 This should open a new page which is the Incident snapshot. Here you will see where in the document the match was found and which Policies/Rules it breaks. There will be buttons across the top of the window, click whichever of these matches the status you wish to change the incident to.
4 A confirmation screen will then appear, check that you have selected the correct status and then click the appropriate button at the top of the screen, OK to confirm status change and return to previous screen, OK & Advance to confirm status change and move onto the next incident snapshot in the list, or Cancel to return to the previous screen.