Automated evaluation is not for everyone

The Veterans Affairs Department built its Formal Event Review and Evaluation Tool (FERET) to automate the prioritizing of security incidents.

It was developed in-house using the Remedy Action Request System (ARS) from BMC Software and integrated into a help-desk function.

FERET could easily be tailored for other organizations, but it might not be right for everyone.

'It's a good tool for larger agencies with a lot of incident reports, where you get a lot of noise and might not have the resources to sift through all of it,' said VA information technology specialist Martin DeLeo.

Team members met with a smaller agency that was interested in FERET. They liked it, 'but with a small number of reports, they didn't need to ferret out any noise,' DeLeo said.

The incident response team was able to handle that job without automated assistance.

It is unlikely that other departments will adopt FERET from VA. One of the advantages of Remedy ARS is that it allows rapid design and development of custom tools for workflow automation. It is commonly used throughout government, said BMC chief technology officer Chris Olson, and most customers have enough experience using the tools that they can develop their own.

About the Author

William Jackson is a Maryland-based freelance writer.


  • Records management: Look beyond the NARA mandates

    Records management is about to get harder

    New collaboration technologies ramped up in the wake of the pandemic have introduced some new challenges.

  • puzzled employee (fizkes/

    Phish Scale: Weighing the threat from email scammers

    The National Institute of Standards and Technology’s Phish Scale quantifies characteristics of phishing emails that are likely to trick users.

Stay Connected

Sign up for our newsletter.

I agree to this site's Privacy Policy.