---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# DLP Incident Response overview

# DLP Incident Response overview {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Learn how you can use the ServiceNow AI Platform and the Data Loss Prevention Incident Response (DLP IR) application. Manage sensitive information for your
customers, such as the financial and proprietary data, health records, or social security
numbers. Automate the remediation workflows with the DLP Incident Response
application.

## Data Loss Prevention Incident Response and the ServiceNow AI Platform {#understanding-data-loss-prevention__section_yqm_vjs_zrb}

The Data Loss Prevention Incident Response application includes the following capabilities:

* An end user workspace where your end users or employees can review and respond to the assigned DLP incidents.
* A manager workspace where a manager can review the escalated DLP incidents and act on them appropriately.
* A unified workspace where your DLP operations team can track the trends on the open incidents, top offenders, incidents by scan source, and can view, edit, assign, and close the DLP incidents across multiple sources (endpoints, networks, and email).
* Administrative controls that define the email templates for end-user coaching and communication, assignment rules for automatic assignment of incidents, auto-escalation rules, and delegation for incident responses.
{#understanding-data-loss-prevention__ul_xjt_rfj_zrb}
**Related reference**   

* [Get started with DLP Incident Response](https://servicenow-prod.fluidtopics.net/bPlqVrWAUKrtTUE4KaJ~Eg "Review the following information before you start setting up your Data Loss Prevention Incident Response (DLP IR) application.")