---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Security Incident Response Orchestration

# Security Incident Response Orchestration {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Security Incident Response Orchestration activities allow users to interact with and retrieve
data from Windows or UNIX-based systems and environments using workflow orchestration.
* **[Set up Security Incident Response Orchestration](https://servicenow-prod.fluidtopics.net/8a8peHLrc4pyuGuiudQkPA)**   
  Prior to using Security Incident Response Orchestration, perform steps to set up various parts of the system, including populating the CMDB, configuring the mid-server, and configuring credentials.
* **[Understand Security Incident Response Orchestration workflows and workflow templates](https://servicenow-prod.fluidtopics.net/QTH5_MN3Vh8M3yItFV43nw)**   
  The Security Incident Response base system includes a series of workflows and workflow templates designed to work with security incident records.