---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Configuration items in cases

# Configuration items in cases {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
You can create a new case from one or more configuration items (CI) in the Configuration
Item \[cmdb_ci\] table. You can also add CIs to existing cases.
* **[Create a case from CIs](https://www.servicenow.com/docs/XR3EK~C5pHwL1bVHDR9hpQ)**   
  You can create a security case from configuration items in the Configuration Item \[cmdb_ci\] table. After the CIs have been used to create a new case, you can use Security Case Management to analyze the data.
* **[Add CIs to existing cases](https://www.servicenow.com/docs/d50S0W4waCv_wDyIEowVhg)**   
  You can add configuration items to one or more existing cases. After the CIs have been added to cases, you can use Security Case Management to analyze the data.

**Related concepts**   

* [IoCs and observables in cases](https://www.servicenow.com/docs/pDT1DUeYRlvoRV~Int7uRA "In Threat Intelligence, you can create cases from IoCs and observables, as well as add IoCs and observables to existing cases. You can also create observables directly from a case.")
* [Security incidents in cases](https://www.servicenow.com/docs/zszm7rOmnBeW7_47CIoWxQ "In Security Incident Response, you can create cases from security incidents, CIs, and affected users, as well as add those artifacts to existing cases.")
* [Affected users in cases](https://www.servicenow.com/docs/64F1IGXwpEtKaNeUbgRF1Q "You can create a new case from one or more affected users in the User [sys_user] table. You can also add users to existing cases.")