Organization notifications are provided by default when:

  • an incident is created

  • an incident is assigned to an organization

  • an investigation is assigned to an organization

  • a remediation action is assigned to an organization

  • a verify action is assigned to an organization

  • an investigative action is assigned to an organization

  • a notify action is assigned to an organization

  • an assembler has a health status change

  • a security device has a health status change

For the list of default user notifications that are added for each new user, see the User notifications default list. To learn more about what the notifications mean, see the Notifications definitions guide.