---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Create a Security Operations user-defined escalation group

# Create a Security Operations
user-defined escalation group {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Escalate a security incident to any group associated with the incident using
Escalations.

## Before you begin

Role required: sn_si.admin

## Procedure

1. Navigate to AllSecurity OperationsGroupsEscalations.
2. Select New.
3. Fill in the fields on the form, as appropriate.  
   {#create-user-defined-escalation-group__table_vks_thr_ns__entry__2}

   | Field | Description |
   |-|-|
   | Number | Escalation incident number (field is auto-generated). |
   | Initial group | Select group this security incident belongs to. |
   | Escalation group | Select group to escalate the security incident to. |
   [Table 1. Escalations]

   {#create-user-defined-escalation-group__table_vks_thr_ns}
4. Select Submit.  
   An escalation group is available for all security incidents in the initial group. You can create multiple groups.

*[\>]: and then