Security Incident Response Workspace

The ServiceNow® Security Incident Response Workspace is a reimagined interface that provides a next-gen user experience for the security analysts and SOC managers. The security analysts can use this to manage the life cycle of security incidents from an initial analysis to containment, eradication, and recovery.

Get started with SIR Workspace

Select a tile to get started.

Explore Workspace Learn about SIR Workspace concepts and features	Admins using Workspace Configure SIR Workspace and features
Analysts using Workspace Learn how Analysts use SIR Workspace	View SIR Dashboards View SIR Workspace dashboards

Request apps on Store

Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

重要:

• Installing the Security Incident Response 13.4.5 version or later from the ServiceNow Store will automatically install the Security Incident Response Workspace (sn_si_aw) 1.5.1 version or later by default. For more information on the dependent applications, refer to the SIR Workspace plugins section.
• Please note that the Security Incident Response Workspace versions 1.5.1 and above can only be installed/upgraded through an installation/upgradation of Security Incident Response and can’t be installed independently.

More resources

Visit the Security Incident Response forum on the ServiceNow Community.