--- title: About Rules Engine in TISC description: The Administration section provides access to Rules Engine module that allow the administrators to configure rule-driven processing of data within TISC. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/tisc-admin-rules-eng.html release: australia product: Threat Intelligence Security Center classification: threat-intelligence-security-center topic_type: concept last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Administer, Threat Intelligence Security Center, Security Operations] --- # About Rules Engine in TISC The Administration section provides access to Rules Engine module that allow the administrators to configure rule-driven processing of data within TISC. Use these modules to control validation, filtering, exclusion rules, scoring, classification, and extraction rules. ## Approval Rule for Data Import Use this module to configure rules that determine whether imported data requires approval before processing or publishing. This helps enforce governance and review controls for inbound data. ## Expiration Rules Use this module to define conditions under which records expire. ## Inbound Data Exclusion Rules Use this module to specify conditions for excluding inbound data from processing. Configure these rules to prevent unwanted, irrelevant, or duplicate data from entering the system. ## Threat Scoring Rule Use this module to configure logic that calculates and assigns threat scores based on defined attributes and conditions. This supports prioritization and risk-based analysis. ## MITRE ATT&CK Technique Extraction Rules Use this module to define rules that extract and map MITRE ATT&CK techniques from relevant data fields. This enables standardized classification and alignment with the MITRE ATT&CK framework. ## Tagging Rules Use this module to configure rules that automatically apply TISC tags and taxonomy values when defined conditions are met. This supports structured categorization, search, filtering, and downstream automation.