---
sourceDocument: Yokohama Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/security-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Promote to Major Security Incident

# Promote to Major Security Incident {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Promote a security incident to major security incident.

## Before you begin

Role required: sn_si.analyst.

## Procedure

1. Navigate to WorkspacesSecurity Incident Response Workspace.
2. Open any security incident.
3. Click Promote to Major Security Incident.
4. On the form, fill in the fields such as Detection date, Estimated resolution date, Justification, and Potential impact.  
5. Click Promote.  
   The incident record is promoted as a major security incident.  
   After the incident record is promoted as a major security incident, Major Security Incident tag is applied and displayed on the form banner.  
   Note:  
   You can also unlink the major security incident if the incident is not critical, the incident will then be unlinked and lists under the list view for the security analyst remediation.
{#promote-to-major-security-incident__steps_v4y_ttb_rvb}

*[\>]: and then