In Security Incident Response, you can create cases from security incidents, CIs, and affected users, as well as add those artifacts to existing cases.