Create a security incident subcategory

  • Release version: Zurich
  • Updated November 16, 2025
  • 1 minute to read
  • Create subcategories for a category for a deeper classification of a security incident in Security Incident Response Workspace.

    Before you begin

    Role required: sn_si.admin

    Procedure

    1. Navigate to Workspaces > Security Incident Response Workspaces > Administration.
    2. Navigate to Category Management > Subcategory.
    3. On the Subcategory page, select New.
    4. On the form, fill in the fields.
      Note:
      The Table, Element, and Language fields are automatically set to the values for the current user.
      Table 1. New security incident subcategory form
      Field Description
      Sequence Controls the display order of this subcategory within the Subcategory field of the security incident's Details tab. Lower sequence numbers appear first.
      Inactive Option for making the subcategory inactive.
      Label Name for the subcategory to display in the Subcategory field of the security incident's Details tab. For example, Worm, virus, Trojan.
      Value The value written to the database record when a user selects this subcategory.
      Dependent value The category value to which this subcategory belongs.
      Hint An optional brief description for this subcategory to identify its usage.
    5. Select Save.

    Result

    The newly created subcategory is saved and appears on the Subcategory page.