Workspace in CADS
Workspace is a major layer of the product — the shared home where your organization’s standards meet the case record. It is how everyone agrees what "done" looks like before a case closes, and how you keep a calm audit trail when reality did not match the checklist.
What “workspace” means here
A workspace is not a ticket queue and not a project folder. It is the boundary in CADS where your team’s rules apply: the same cases, the same expectations for investigation quality, and the same record when someone had to close with a readiness item still open.
- Everyone in the workspace sees the same case narrative and timelines — no parallel copies that drift apart.
- Completion standards (how strictly CADS expects work to be finished before close) are owned at the workspace level.
- A read-only review log captures who documented exceptions and why — useful for managers and auditors, not for day-to-day triage.
Workspace vs. where you work incidents
Discover and Connect & capture are where responders and leads do everyday work: find cases, add investigation entries, capture decisions. The Workspace area in the app is for people steering how the workspace behaves — not for logging every keystroke on a single incident.
- Use Discover when you are moving a case forward or reviewing what happened.
- Use Connect & capture when you are linking external signals or practising the flow with sample data.
- Use Workspace (after sign-in) when you need completion rules, integration posture for enforcement, or the closure review log.
What you will find in Workspace
After you sign in, open Workspace from the main navigation. Inside, the product groups the main tools like this:
- Case completion rules — Choose how complete investigations should be before a case can close, and how CADS aligns with your ticketing tools — the policy your team runs under.
- Closure review log — A read-only list of documented times someone closed with a readiness item waived, with who recorded it and why.
New workspace capabilities may appear here over time; the idea stays the same: one place for shared standards and oversight, separate from the screens where you chase the incident of the hour.
Related: account provisioning
Provisioning is the automatic setup that gives a new sign-in a default place to work. That is documented for IT and security stakeholders separately — it is not the same screen as the in-product Workspace tools above, but both use the word "workspace" on purpose: your account always belongs to a workspace context in CADS.
Ready to apply this?
Start a decision in CADS →