---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Close security incidents

# Close security incidents {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The Wrap up security incident agentic workflow enables security analysts to close a security incident.

## Wrap up security incident agentic workflow overview {#now-assist-sir-close-incident-usecase__section_b4k_b3h_m2c}

Using the Wrap up security incident agentic workflow, cancel the associated response tasks, generate resolution notes, close notes, close code and post incident analysis (PIA) during a security incident closure, and provide
feedback and adjust content in natural language​ from the ServiceNow Otto panel.

To modify this agentic workflow, you can [duplicate](https://www.servicenow.com/docs/access?context=clone-aia-usecase&version=brazil&pubname=brazil-intelligent-experiences&ft:locale=en-US) it, adjust the settings to suit your specific needs, and activate the duplicated version of the agentic workflow instead.

## Agent used in Wrap up security incident agentic workflow {#now-assist-sir-close-incident-usecase__section_bbr_g3h_m2c}

The Security incident wrap-up generator expert is used in the Wrap up security incident agentic workflow.
* **[Close a security incident](https://www.servicenow.com/docs/ymDhCja~EqR2Dg3IS7bNCg)**   
  Chat with an AI agent in the ServiceNow Otto panel to help you close a security incident.