Service Update
| Availability | June 18th, 2026 |
| Product(s) | Human Risk Command Center |
| Who's affected | Administrators |
Overview
Mimecast is pleased to announce that administrators can now mark individual events to be ignored within the Human Risk Command Center (HRCC), flagging them as either a false positive or a benign event. This gives administrators direct control over which events contribute to use behavior risk scores and attack factor calculations.
When events are excluded from scoring, HRCC data accurately reflects the behaviors and incidents that your organization considers risky, enabling better-informed security decisions.
What's changing
- Administrators can now mark any individual event to be ignored, classifying it as either a false positive or a benign event directly from the HRCC event detail view.
- Ignored events are excluded from user behavior risk score calculations and attack factor metrics, so scores reflect only events the organization considers genuinely risky.
- This capability extends beyond URL clicks in actual phishing simulations to all supported HRCC behavior types, giving administrators consistent control across the full range of tracked events.
- Marked events remain visible in the event log with a clear ignored indicator in the event details, preserving history while removing their scoring impact.
- The action is not reversible; administrators cannot unmark an ignored event to restore its contribution to scoring.
- Additionally, the Risk Activity page of the HRCC (formerly the Risk Response Engine page) now has an Event Log tab enabling users to view events across all users in their organization.
Recommended actions
- No action is required as a result of this change. The capability is available immediately in your HRCC event detail view.
- Administrators are encouraged to review events that may have inflated or distorted user risk scores and use the new marking capability to correct them.
- If you have any questions, contact Mimecast Support or reach out to your Customer Success Manager.
Comments
Please sign in to leave a comment.