---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Security Incident Response flow templates

# Security Incident Response flow templates {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

The Security Incident Response base system includes a series of workflow templates
created using the Flow Designer that work with security incident records.

Only users with the sn_sec_cmn.admin role can add or edit Security Operations workflow
templates, and user with sn_si_admin role is required to update the flow templates.

## Important activation information {#sir-flows-and-templates__section_ssl_gq5_3bb}

The workflow templates created with the Workflow Editor and the flow templates created with the Flow Designer are both deactivated by default. The workflow templates can be activated using [Workflow
Triggers](https://servicenow-prod.fluidtopics.net/qP77d3hlwWX2IZ4sLRgrZA "Create a workflow trigger that contains a condition on a table."). Flow Designer templates can be activated using the Flow Designer.  
Nota:  
You must be careful not to activate the same template of each type. For example, avoid activating the [Security Incident Confidential Data Exposure workflow template](https://servicenow-prod.fluidtopics.net/Rozs5Hc6WGckVqDRashLew "The Security Incident - Confidential Data Exposure - Template allows you to perform a series of tasks designed to handle the exposure of sensitive data.") and the [Security Incident Confidential Data Exposure flow template](https://servicenow-prod.fluidtopics.net/1b_9TtJLM6ggaqgY6YxcAg "The Security Incident - Confidential Data Exposure - Template allows you to perform a series of tasks designed to handle the exposure of sensitive data."). Doing so may cause the execution of both the workflow and flow, and the creation of duplicate information.
* **[Security Incident Confidential Data Exposure flow template](https://servicenow-prod.fluidtopics.net/1b_9TtJLM6ggaqgY6YxcAg)**   
  The Security Incident - Confidential Data Exposure - Template allows you to perform a series of tasks designed to handle the exposure of sensitive data.
* **[Security Incident Denial of Service flow template](https://servicenow-prod.fluidtopics.net/ZGHEJLlfPg79o3q8_PgFHQ)**   
  The Security Incident - Denial of Service - Template allows you to perform a series of tasks designed to handle Denial of Service (DOS) attacks.
* **[Security Incident Lost Equipment flow template](https://servicenow-prod.fluidtopics.net/bEzICz96849~mSJ407MpoA)**   
  The Security Incident - Lost Equipment - Template allows you to perform a series of tasks designed to handle lost equipment.
* **[Security Incident Malicious Software flow template](https://servicenow-prod.fluidtopics.net/aaAD_LLy4Z8PnkceLuP9xQ)**   
  The Security Incident - Malicious Software - Template allows you to perform a series of tasks designed to handle malicious software on your network.
* **[Security Incident Phishing flow template](https://servicenow-prod.fluidtopics.net/BiPvbwGXdFjl9tYgrEULjA)**   
  The Security Incident - Phishing - Template allows you to perform a series of tasks designed to handle spear phishing emails on your network.
* **[Security Incident Policy Violation flow template](https://servicenow-prod.fluidtopics.net/repNFx19wmma1mxd46vCVw)**   
  The Security Incident - Policy Violation - Template allows you to perform a series of tasks designed to handle security policy violations.
* **[Security Incident Reconnaissance flow template](https://servicenow-prod.fluidtopics.net/PGhtcGeFpc__gdxI7FGYSw)**   
  Reconnaissance is usually a preliminary step toward a further attack seeking to exploit a device or system. The Security Incident - Reconnaissance - Template allows you to perform a series of tasks designed to handle reconnaissance on your network.
* **[Security Incident Rogue Server or Service flow template](https://servicenow-prod.fluidtopics.net/hozF20Bsenm5P5LvZb8tLg)**   
  The Security Incident - Rogue Server or Service - Template allows you to perform a series of tasks designed to handle activity from rogue servers or services affecting your network.
* **[Security Incident Spam flow template](https://servicenow-prod.fluidtopics.net/Rwjwf5Xl~mUIZgIEo9b7YA)**   
  The Security Incident - Spam - Template allows you to perform a series of tasks designed to handle email spam on your network.
* **[Security Incident Unauthorized Access flow template](https://servicenow-prod.fluidtopics.net/D6eYWGA~RCegM~MpZsNtIw)**   
  The Security Incident - Unauthorized Access - Template allows you to perform a series of tasks designed to handle unauthorized access to your network.
* **[Security Incident Web/BBS Defacement flow template](https://servicenow-prod.fluidtopics.net/oYFoCSImTKpdyG7S9Qz8MQ)**   
  The Security Incident - Web/BBS Defacement - Template allows you to perform a series of tasks designed to handle vandalism directed against one of your organization's BBS or web sites.