View, edit and assign unassigned security incidents with the Security Incident Response Mobile app
From your mobile device, view, edit, and assign unassigned Security Incident Response (SIR) incidents. View related lists and the audit trail of work notes for more details about incidents.
Before you begin
About this task
Procedure
-
With the Security Incidents landing screen displayed, tap Unassigned
Incidents.
If you navigate away from the Security Incident Response Mobile app after you have logged in, tap the Now Agent app at any time to return to the last screen you had displayed.
The Unassigned Incidents screen is displayed with a list of unassigned security incident records. - Optional:
Refer to Search for security incidents with the Security Incident Response Mobile app to search for
security incidents that match specific criteria.
Alternatively, with the filter icon (
) displayed, Set filters to limit the number of records on the list. Filtering
records on screens in the mobile app works like filtering with a condition
builder on the ServiceNow AI Platform. -
To assign or reassign an open security incident record directly from the list,
with the list of open unassigned security incident records displayed, swipe left
on a record to open the menu.
-
Choose one from the menu to continue.
Option Description Assign to Me Assign the security incident to yourself. If the security incident is already assigned to you, this option is not displayed. Reassign To assign or reassign the assignment group: - Tap Assignment group.
- Tap a group from the list that is displayed, or enter text in the search field. The group must be a security-related assignment group.
To assign or reassign the security incident to a member of the assignment group:
- Tap Assigned to.
- Tap a name from the list that is displayed, or enter text in the search field.
Tap the send icon (
) or Submit to save and submit your
changes. -
On the open record that is displayed, choose one option from the following
table to continue.
Option Description Tap the menu icon ( 
) on the upper right of the screen.From the menu that is displayed, choose from the following options. - Tap Edit. With the Edit Security Incident screen displayed, tap a field to expand it and choose one or more of the options that are displayed. Alternatively, tap the search icon and enter text.
- To assign or reassign the incident, tap Reassign or Assign to Me. Follow the instructions described in the previous table.
After you complete your edits, tap the send icon (
) or Submit to save your changes and
update the security incident.Activity Stream tab With the Activity Stream tab selected, review the audit trail of work notes, activities, and additional comments of the record. Tap the plus icon (
) to add a work note or attach a file.Related List tab With the Related List tab selected, view the items on any of the Related Lists that are populated on the security incident.
Tap an item on the list that is displayed to view the details for a related list. From the lists of items that are displayed, tap an item to continue to view the activity streams and related lists associated with the parent security incident.
Screen icons at the bottom of the screen. On the bottom of the screen, choose one to continue. - Tap the Security Incidents icon to return to the landing screen.
- If displayed, tap an icon to open another ServiceNow® mobile app.
- Tap Notification to view notifications from the ServiceNow AI Platform and the Security Incident Response Mobile app.
- Tap Settings and choose one to
continue.
- View information about the ServiceNow AI Platform instance on your device.
- Log out of the current ServiceNow AI Platform instance.