# Workflow capability matrix

Source: <https://www.tines.com/workflow-capability-matrix/>

Status line: **Showing all 162 areas.**
Filter trigger: **All 14 capabilities**

## Application security _(6 areas)_

### Code security
- **Secure coding** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/secure-coding/))

### SAST and DAST management
- **Secret scanning** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/secret-scanning/))
- **Application vulnerability scanning** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/application-vuln-scanning/))
- **Configuration and dependency management** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/configuration-and-dependency-management/))
- **Suggest code fix** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/suggest-code-fix/))

### Security reviews
- **Code ownership** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/code-ownership/))

## Cloud security _(7 areas)_

### Cloud risk management
- **System hardening** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/system-hardening/))
- **Managing configuration drift** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/managing-configuration-drift/))

### Cloud alert management
- **Cloud alerts** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/cloud-alerts/))

### Cloud alert remediation
- **Modify visibility settings** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/modify-visibility-settings/))

### Cloud workload management
- **System rollback** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/system-rollback/))
- **Backup procedures** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/backup-procedures/))
- **Infrastructure failover** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/infrastructure-failover/))

## IT service delivery and support _(27 areas)_

### Systems monitoring and alerting
- **Issue creation** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/issue-creation/))
- **Issue routing** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/issue-routing/))

### Incident and problem management
- **Standard issue format** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/standard-issue-format/))
- **Related issues** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/related-issues/))
- **Issue closure** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/issue-closure/))
- **Trend escalation** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/trend-escalation/))
- **Chat alerts** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/chat-alerts/))
- **War room creation** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/war-room-creation/))

### Endpoint management
- **Hardware tracking / asset inventory** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/hardware-tracking-asset-inventory/))
- **Device provisioning** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/device-provisioning/))
- **Device isolation** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/device-isolation/))
- **Device deprovisioning** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/device-deprovisioning/))
- **Performance monitoring** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/performance-monitoring/))

### Request fulfilment
- **Self service capabilities** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/self-service-capabilities/))
- **Web form interaction** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/web-form-interaction/))
- **Chatbot interaction** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/chatbot-interaction/))
- **Request routing** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/request-routing/))
- **Approval workflows** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/approval-workflows/))
- **Software licence management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/software-licence-management/))
- **SLA tracking** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/sla-tracking/))
- **Status tracking of requests** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/status-tracking-of-requests/))

### IAM
- **Logging / audit trail** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/logging-audit-trail/))
- **Zero trust / least access** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/zero-trust-least-access/))
- **Provisioning / deprovisioning users** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/provisioning-deprovisioning-users/))
- **MFA** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/mfa/))
- **Centralized ID** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/centralized-id/))
- **RBAC** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/rbac/))

## Governance, risk and compliance _(8 areas)_

### Policy management and education
- **Training assignment** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/training-assignment/))
- **Send training reminders** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/send-training-reminders/))
- **Dashboarding** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/dashboarding/))

### Detecting and remediating violations
- **Application execution policy** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/application-execution-policy/))
- **User assessment** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/user-assessment/))
- **Asset assessment** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/asset-assessment/))

### Compliance evidence collection
- **Change management** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/change-management/))
- **Logging / audit trail** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/logging-audit-trail/))

## Networking _(13 areas)_

### Network incident response
- **Network anomaly detection** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/network-anomaly-detection/))
- **Packet analysis** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/packet-analysis/))
- **Network data collection** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/network-data-collection/))

### Network access management
- **VPN access provisioning** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/vpn-access-provisioning/))
- **Just In Time network access** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/just-in-time-network-access/))
- **Device network access** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/device-network-access/))

### Network change management
- **IPAM orchestration** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/ipam-orchestration/))
- **Firewall / Network change approval (layer 2/3)** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/firewall-network-change-approval-layer-23/))
- **Configuration drift detection** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/configuration-drift-detection/))
- **Network change scheduling** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/network-change-scheduling/))

### Certificate management
- **Certificate revocation** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/certificate-revocation/))
- **Certificate deployment** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/certificate-deployment/))
- **Certificate renewal** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/certificate-renewal/))

## Network security _(8 areas)_

### Network access control
- **Dynamic network segmentation** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/dynamic-network-segmentation/))
- **Firewall rule management** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/firewall-rule-management/))
- **Certification management** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/certification-management/))

### Network alert response
- **Network alerts** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/network-alerts/))
- **Network traffic analysis** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/network-traffic-analysis/))
- **Packet capture** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/packet-capture/))

### Analyzing network configurations
- **Asset discovery scanning** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/asset-discovery-scanning/))
- **Network mapping** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/network-mapping/))

## Infrastructure management _(20 areas)_

### Systems monitoring and alerting
- **Asset and inventory management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/asset-and-inventory-management/))
- **Automated asset discovery** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/automated-asset-discovery/))
- **Capacity alerting** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/capacity-alerting/))
- **Relationship mapping** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/relationship-mapping/))
- **Heartbeat monitoring** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/heartbeat-monitoring/))
- **Alert ingest** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/alert-ingest/))
- **Alert formatting** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/alert-formatting/))
- **Maintenance window management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/maintenance-window-management/))
- **Cost management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/cost-management/))

### Endpoint management
- **Run command on a device** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/run-command-on-a-device/))

### Capacity and availability management
- **Resource provisioning** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/resource-provisioning/))
- **Resource retirement** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/resource-retirement/))
- **High availability and fault tolerance** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/high-availability-and-fault-tolerance/))
- **Backup and recovery** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/backup-and-recovery/))
- **Performance tuning** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/performance-tuning/))
- **Infrastructure as code** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/infrastructure-as-code/))

### Configuration and patch management
- **Production acceptance check** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/production-acceptance-check/))
- **Managing configuration drift** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/managing-configuration-drift/))
- **Patch management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/patch-management/))
- **System rollback** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/system-rollback/))

## Identity and access management _(17 areas)_

### (uncategorized)
- **IAM alerts** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/iam-alerts/))
- **Organization lookup** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/organization-lookup/))

### User account management
- **Provisioning / deprovisioning users** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/provisioning-deprovisioning-users/))
- **Update user group membership** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/update-user-group-membership/))
- **User lookup** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/user-lookup/))
- **Account suspension** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/account-suspension/))

### Access controls
- **Just-In-Time access** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/just-in-time-access/))
- **Permission assignment** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/permission-assignment/))
- **RBAC** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/rbac/))

### Authentication processes
- **Disable multifactor authentication device** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/disable-multifactor-authentication-device/))
- **Send multifactor prompt** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/send-multifactor-prompt/))
- **Password invalidation** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/password-invalidation/))
- **Authentication session invalidation** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/authentication-session-invalidation/))

### Endpoint management
- **Asset lookup** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/asset-lookup/))
- **Identify assets** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/identify-assets/))
- **Asset assignment** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/asset-assignment/))
- **Endpoint tracking** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/endpoint-tracking/))

## Threat intelligence _(13 areas)_

### Alert enrichment
- **Blocklist updates** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/blocklist-updates/))
- **IP list** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/ip-list/))
- **Domain list** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/domain-list/))
- **File hash list** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/file-hash-list/))
- **False positive identification** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/false-positive-identification/))
- **Trend escalation** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/trend-escalation/))

### Threat hunting
- **Artifact gathering** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/artifact-gathering/))
- **Active host processes** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/active-host-processes/))

### Analyzing IOCs
- **File hash analysis** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/file-hash-analysis/))
- **Domain analysis** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/domain-analysis/))
- **File analysis** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/file-analysis/))
- **Email attribute analysis** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/email-attribute-analysis/))
- **IP analysis** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/ip-analysis/))

## Application management _(14 areas)_

### Application performance and reporting
- **Incident and problem management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/incident-and-problem-management/))
- **Event management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/event-management/))
- **Knowledgebase documentation** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/knowledgebase-documentation/))

### Application management
- **Data management and storage** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/data-management-and-storage/))
- **Change management** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/change-management/))
- **Configuration and dependency management** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/configuration-and-dependency-management/))
- **Release and deployment management** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/release-and-deployment-management/))

### Application security and intelligence
- **RAG** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/rag/))
- **Summarize alerts** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/summarize-alerts/))
- **Secure coding** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/secure-coding/))
- **Secret scanning** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/secret-scanning/))
- **Application vulnerability scanning** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/application-vuln-scanning/))
- **Anomaly detection** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/anomaly-detection/))

### Endpoint management
- **Application deployment** — _IT_ ([detail](https://www.tines.com/workflow-capability-matrix/application-deployment/))

## Incident response _(13 areas)_

### (uncategorized)
- **SIEM alerts** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/siem-alerts/))
- **Anomaly detection** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/anomaly-detection/))
- **Alert ingest** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/alert-ingest/))
- **Notify emergency resources** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/notify-emergency-resources/))
- **End running process** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/end-running-process/))
- **Run command on a device** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/run-command-on-a-device/))
- **Device isolation** — _Security & IT_ ([detail](https://www.tines.com/workflow-capability-matrix/device-isolation/))
- **Endpoint alerts** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/endpoint-alerts/))
- **Phishing alerts and reports** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/phishing-alerts-and-reports/))
- **Edit email inbox rules** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/edit-email-inbox-rules/))
- **Block email sender** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/block-email-sender/))
- **Perform takedown** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/perform-takedown/))
- **Email deletion** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/email-deletion/))

## Vulnerability management _(4 areas)_

### Monitoring vulnerabilities
- **Vulnerability identification** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/vulnerability-identification/))
- **Vulnerability validation** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/vulnerability-validation/))

### Remediating vulnerabilities
- **Patch rollout** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/patch-rollout/))
- **Patch testing** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/patch-testing/))

## Data loss prevention _(4 areas)_

### Data security
- **Data classification and tagging** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/data-classification-tagging/))
- **File and network encryption** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/file-and-network-encryption/))
- **File permissions** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/file-permissions/))

### DLP alert enrichment and remediation
- **Block data transfers** — _Security_ ([detail](https://www.tines.com/workflow-capability-matrix/block-data-transfers/))

## Other _(23 areas)_

### (uncategorized)
- **Chat archive** ([detail](https://www.tines.com/workflow-capability-matrix/chat-archive/))
- **Workflow versioning** ([detail](https://www.tines.com/workflow-capability-matrix/workflow-versioning/))
- **Workflow documentation** ([detail](https://www.tines.com/workflow-capability-matrix/workflow-documentation/))
- **Workflow backup** ([detail](https://www.tines.com/workflow-capability-matrix/workflow-backup/))
- **User response** ([detail](https://www.tines.com/workflow-capability-matrix/user-response/))
- **User notification** ([detail](https://www.tines.com/workflow-capability-matrix/user-notification/))
- **Tracking location** ([detail](https://www.tines.com/workflow-capability-matrix/tracking-location/))
- **Timed escalation** ([detail](https://www.tines.com/workflow-capability-matrix/timed-escalation/))
- **Slash commands** ([detail](https://www.tines.com/workflow-capability-matrix/slash-commands/))
- **Set custom fields** ([detail](https://www.tines.com/workflow-capability-matrix/set-custom-fields/))
- **Security team response** ([detail](https://www.tines.com/workflow-capability-matrix/security-team-response/))
- **Quality sampling** ([detail](https://www.tines.com/workflow-capability-matrix/quality-sampling/))
- **OAuth application lookup** ([detail](https://www.tines.com/workflow-capability-matrix/oauth-application-lookup/))
- **Issue freshness** ([detail](https://www.tines.com/workflow-capability-matrix/issue-freshness/))
- **Issue deduplication** ([detail](https://www.tines.com/workflow-capability-matrix/issue-deduplication/))
- **Handle dates** ([detail](https://www.tines.com/workflow-capability-matrix/handle-dates/))
- **Email alerts** ([detail](https://www.tines.com/workflow-capability-matrix/email-alerts/))
- **Data search** ([detail](https://www.tines.com/workflow-capability-matrix/data-search/))
- **Chat modal responses** ([detail](https://www.tines.com/workflow-capability-matrix/chat-modal-responses/))
- **Chat events** ([detail](https://www.tines.com/workflow-capability-matrix/chat-events/))
- **Bespoke alerts** ([detail](https://www.tines.com/workflow-capability-matrix/bespoke-alerts/))
- **Automation tests** ([detail](https://www.tines.com/workflow-capability-matrix/automation-tests/))
- **Automate by documentation** ([detail](https://www.tines.com/workflow-capability-matrix/automate-by-documentation/))
