---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Close security incidents

# Close security incidents {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Wrap up security incident agentic workflow enables security analysts to close a security incident.

## Wrap up security incident agentic workflow overview {#now-assist-sir-close-incident-usecase__section_b4k_b3h_m2c}

Using the Wrap up security incident agentic workflow, cancel the associated response tasks, generate resolution notes, close notes, close code and post incident analysis (PIA) during a security incident closure, and provide
feedback and adjust content in natural language​ from the ServiceNow Otto panel.

To modify this agentic workflow, you can [duplicate](https://www.servicenow.com/docs/access?context=clone-aia-usecase&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US) it, adjust the settings to suit your specific needs, and activate the duplicated version of the agentic workflow instead.

## Agent used in Wrap up security incident agentic workflow {#now-assist-sir-close-incident-usecase__section_bbr_g3h_m2c}

The Security incident wrap-up generator expert is used in the Wrap up security incident agentic workflow.