View, edit, and reassign security incidents assigned to you with the Security Incident Response Mobile app
As a security incident analyst, view, edit, and reassign Security Incident Response (SIR) incidents that are assigned to you. View related lists and the audit trail of work notes for more details about incidents.
Before you begin
About this task
Procedure
-
With the Security Incidents landing screen displayed, tap My
Incidents.
If you navigate away from the Security Incident Response Mobile app after you have logged in, tap the Now Agent app at any time to return to the last screen you had displayed.
The My Incidents screen is displayed with a list of open security incident records that are assigned to you. - Optional:
Refer to Search for security incidents with the Security Incident Response Mobile app to search for
security incidents that match specific criteria.
Alternatively, with the filter icon (
) displayed, Set filters to limit the number of records on the list. Filtering
records on screens in the mobile app works like filtering with a condition
builder on the ServiceNow AI Platform. -
To reassign an incident directly from the list, with the list of open security
incident records displayed, swipe left on a record to open the menu.
-
Edit the Assignment group or the Assigned to fields from the menu that is
displayed.
Option Description Reassign To reassign the assignment group: - Tap Assignment group.
- Tap a group from the list that is displayed, or enter text in the search field. The group must be a security-related assignment group.
To assign or reassign the security incident to a member of the assignment group:
- Tap Assigned to.
- Tap a name from the list that is displayed, or enter text in the search field.
Tap the send icon (
) or Submit to save and submit your
changes. -
On the open record that is displayed, choose one option from the following
table to continue.
Option Description Tap the menu icon ( 
) on the upper right of the screen.From the menu that is displayed, choose from the following options. - Tap Edit. With the Edit Security Incident screen displayed, tap a field to expand it and choose one or more of the options that are displayed. Alternatively, tap the search icon and enter text.
- To reassign the incident, tap Reassign. Follow the instructions described in the previous table.
After you complete your edits, tap the send icon (
) or Submit to save your changes and
update the security incident.Activity Stream tab With the Activity Stream tab selected, review the audit trail of work notes, activities, and additional comments of the record. Tap the plus icon (
) to add a work note or attach a file.Related List tab With the Related List tab selected, view the items on any Related Lists that are populated on the security incident.
Tap an item on the list that is displayed to view the details for a related list. From the lists of items that are displayed, tap an item to continue to view the activity streams and related lists associated with the parent security incident.
Screen icons at the bottom of the screen. On the bottom of the screen, choose one to continue. - Tap the Security Incidents icon to return to the landing screen.
- If displayed, tap an icon to open another ServiceNow® mobile app.
- Tap Notification to view notifications from the ServiceNow AI Platform and the Security Incident Response Mobile app.
- Tap Settings and choose one to
continue.
- View information about the ServiceNow AI Platform instance on your device.
- Log out of the current ServiceNow AI Platform instance.