---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Manage post incident activities

# Manage post incident activities {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Based on the requirements of your business, a review of the origins and handling of
security incidents is often needed.

The Post Incident Review functionality in ServiceNow provides
many tools for automating, tracking, auditing, and simplifying this process.  
This section describes the following:

* [Assign post incident review roles](https://servicenow-prod.fluidtopics.net/svpXalQfBn1TjJ9ona~K3g "You can target questions to specific pre-defined groups by assigning roles to Post Incident Review (PIR) categories.")
* [Configure an assessment trigger condition](https://servicenow-prod.fluidtopics.net/I6M24t~yMJjyuDFSyus5Fg "Define rule conditions and generate required and optional assessments for specific security incidents.")
* [Perform a questionnaire-based post incident review](https://servicenow-prod.fluidtopics.net/RpXYiW_3yayORkfJUuvNbQ "You may decide that a post incident review of the security incident is warranted. A post incident review describes what happened, helps to determine why the incident occurred, and identifies how it can be avoided or handled in the future.")
* [Create post incident review assignment rules](https://servicenow-prod.fluidtopics.net/fJib4V8yH45qkDz65CMKOg "In addition to manually adding users to a Post Incident Review (PIR) assessment list for a security incident, you can define assignment rules for automatically adding users or group to the list.")
* [Post incident review report](https://servicenow-prod.fluidtopics.net/kpZrE0OeEbciR4Yl7QanLQ "The Post Incident Review (PIR) reports feature enables you to set up and download the post incident review reports using the Post Incident Review tab.")
{#c_PostIncidentReview__ul_wxb_sf1_wmb}