DELEGATING SECURITY REMEDIATIONS TO EMPLOYEES VIA SLACK

Summary from the TLDR InfoSec newsletter

Slack interactions come in four categories: remind, alert, delegate, and respond. Remind and alert actions are more commonplace. Remind interactions remind users to take an action (such as mandatory training) and alert actions alert the security team to various alerts from other sources. There are two new categories in SlackSecOps called delegate and respond. Delegate actions involve an alert asking a user if a behavior was intentional (adding a contractor to a sensitive permission, sharing documents, etc) and only alerts the security team based on the response. Respond interactions are when a security team receives a request and can respond to it directly via Slack such as approving an access request and granting the access directly in Slack.