Skip to main content
Enforcement status tracks which responsive actions were taken from assessment workflows—especially the Quick Enforce panel in Predict—and whether they succeeded, are pending, or require follow-up.

​
Overview

TOTAL Enforce is the enforcement fabric built on risk assessment: signals from Predict and related surfaces drive available actions, and the platform records what ran and how it completed. That visibility complements open Investigations and supports accountability after closure.

​
Available Actions

Quick Enforce exposes a fixed set of actions (exact availability may depend on role and policy):

​
Self Police

User-facing nudge or self-remediation path where policy allows the subject to correct behavior or acknowledge policy without immediate IT lockout.

​
Lock Device

Remotely locks the subject device to contain risk until the investigation is cleared or another step is taken.

​
Escalate to HR

Routes the case into HR workflow per your integration—typically with context from the investigation and threat summary.

​
Escalate to Manager

Notifies or assigns the subject’s manager for awareness or local handling according to policy.

​
Restrict Access

Applies conditional or partial access limits (applications, resources, or sessions) short of a full device lock.

​
Emergency (911)

Initiates or surfaces an emergency escalation path your organization defines for imminent-harm scenarios. Use only in line with legal and corporate policy.

​
Action Statuses

Each action moves through states such as requested, in progress, completed, or failed (labels may vary by integration). Failed or stuck actions should be retried or handled manually per runbooks. Status appears in the enforcement UI tied to the user or investigation context.

​
Tracking Enforcement Outcomes

Tie enforcement records to the investigation ID and subject so reviewers can see what was attempted and final disposition alongside Investigations cards and past investigations. Outcome tracking supports reporting on time-to-enforce and effectiveness of each action type.