View, edit, and assign open response tasks with the Security Incident Response Mobile app

View, edit, and assign open response tasks. Your changes are saved on the Security Incident Response Task of the parent security incident.

Before you begin

Role required: sn_si.analyst

About this task

From the list of records, assign an open, unassigned response task to yourself or to another analyst in your group. Alternatively, view the details of the record or add a work note prior to assignment. Time to complete this task: 5-10 minutes.

Procedure

1. If you are not logged in to your ServiceNow AI Platform instance on your mobile device, for more information see Log in to the Security Incident Response Mobile app.
2. With the Security Incidents landing screen displayed, tap Open Response Tasks.

   If you navigate away from the Security Incident Response Mobile app after you have logged in, tap the Now Agent app at any time to return to the last screen you had displayed.

   

   The Open Response Tasks screen is displayed with a list of open tasks.

   

3. Optional: Refer to Search for security incidents with the Security Incident Response Mobile app to search for tasks that match specific criteria.
   Alternatively, with the filter icon () displayed, Set filters to limit the number of records on the list. Filtering records on screens in the mobile app works like filtering with a condition builder on the ServiceNow AI Platform.
4. With the list of open response tasks displayed, to assign or reassign directly from the list, swipe left on a record to open the menu.
5. Choose one to continue.

   Option	Description
   Assign to Me	Assign the response task to yourself. If the task is already assigned to you, this option is not displayed.
   Reassign	To assign or reassign the assignment group: Tap Assignment group Tap a group from the list that is displayed, or enter text in the search field. The group must be a security-related assignment group. To assign or reassign the task to a member of the assignment group: Tap Assigned to and Tap a name from the list that is displayed, or enter text in the search field. A message is displayed that confirms the record is updated. The task on the parent security incident is assigned to a new user and updated in your ServiceNow AI Platform instance. Tap the send icon () or Submit to save and submit your changes.

6. Alternatively, to view the details of an open response task record, with the Open Response Tasks screen displayed, tap a record on the list.
7. With the tabs on the response task record displayed, choose one in the following table to continue.

   

   Option	Description
   Details tab	With the Details tab selected, review the fields on the response task. To edit fields or assign the task, tap the menu icon (). From the menu that is displayed, choose from the following options. Tap Edit. With the Edit Response Task screen displayed, tap a field to expand it and choose one or more of the options that are displayed. Alternatively, tap the search icon and enter text. To reassign the task, tap Reassign or Assign to Me. After you complete your edits, tap the send icon () or Submit to save your changes and update the record. The Security Incident Response Task on the parent security incident in your ServiceNow AI Platform instance is updated.
   Activity Stream tab	With the Activity Stream tab selected, choose one to continue. View the audit trail created by the Work notes on the record. To add a work note or attach a file, tap the plus icon (). Tap the menu icon () to edit or reassign the task.
   Screen icons at the bottom of the screen.	On the bottom of the screen, choose one to continue. If displayed, tap an icon to open another ServiceNow® mobile app. Tap Notification to view notifications for critical security incidents that are assigned to you or to your assignment group. Tap Settings and choose one to continue. View information about the ServiceNow AI Platform instance. Log out of the current instance. To log out of a ServiceNow AI Platform instance on your device, with the details page displayed, tap Logout.