In Symantec Endpoint Protection Manager (SEPM) 14.3 RU6 and later, "Action invalid" is missing in Single Risk Event Notification - [Action taken] pulldown list.
In SEPM 14.3 RU5 and earlier, "Action invalid" is present.
This issue is fixed in SEPM 14.3 RU8 version
CRE-13549