---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Configure report templates in Security Incident Response

# Configure report templates in Security Incident Response {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

You can create report templates that can be used to generate an incident summary or an executive summary for analysis and sharing.

Use Security Incident Response Report Templates feature to create report templates to generate reports that provide an analyst level or an executive level summary of an incident. You can format and configure the report on the basis of
your requirements using various incident fields.

The following table explains the report templates that are provisioned within the base system.
{#daily-status-sir__table_fyv_ctv_12c__entry__2}

| Name | Description |
|-|-|
| Analyst Status Reporting | Provides a complete information of an security incident for an analyst. |
| Executive Summary | Provides an overview of the status of an security incident for the management. |
[Table 1. Report templates in Security Incident Response]

{#daily-status-sir__table_fyv_ctv_12c}  
Note:  
By default, these reports are in the draft state and are in the read-only mode. You have to reuse these default templates to create and publish report templates.
* **[Create a Report Template in Security Incident Response](https://servicenow-prod.fluidtopics.net/QAJmXY0JdtKJ6Ic7rXjGYQ)**   
  Create a new report template for analyst summary or an executive summary for an incident.
* **[System properties for reports](https://servicenow-prod.fluidtopics.net/7K_wmG7_Xn5VAmMp9MNReg)**   
  The system properties for Security Incident Response reports are explained below.
* **[Duplicate a report template in Security Incident Response](https://servicenow-prod.fluidtopics.net/5KS9OSYV4FXXVze~UjaoFA)**   
  Duplicate a report template to edit or reuse an existing template to create a new template.
* **[Edit a report template in Security Incident Response](https://servicenow-prod.fluidtopics.net/Hbv46_ISfvMwC0uLGIfKog)**   
  Edit a report template to reuse an existing template to create a new template.

**Related concepts**   

* [Set up view of SIR Records](https://servicenow-prod.fluidtopics.net/p99YPRJHUz3SrQBoAXW8UA "This section describes how the related lists are grouped and presented on the SIR Related Records tab for easy navigation.")
* [Configure SI design time investigation](https://servicenow-prod.fluidtopics.net/KsFsXg8CHBvaYTkUnuEOpQ "Use this section to configure security incident design time investigation page to add multiple entry points and its associated records within the Security Incident Response Workspace.")
* [SIR Workspace Related Records](https://servicenow-prod.fluidtopics.net/gsDO~PbQk8zzmwnZXCwg6Q#sir-records "This section consists of the related lists items that are grouped into sections such as associated observables and configuration items.")
* [Configure Shift Handover](https://servicenow-prod.fluidtopics.net/Q04QzNU1caN3mjs4rEUNGg "Configure Shift Handover settings to provide complete shift information to the next shift analysts.")
* [Security Incident Response conference call integration](https://servicenow-prod.fluidtopics.net/88P4jTtlgisR6XEYl1fsMA "The Security Incident Response Conference Call integration enables you to manage and initiate conference call and chat for analysts, managers and affected users.")
* [On-Call scheduling in Security Incident Response](https://servicenow-prod.fluidtopics.net/sPKhH7CGbUOINSD8C3fVaQ "Use On-Call Scheduling in Security Incident Response to view and manage shifts for your analysts.")
* [Category management in Security Incident Response](https://servicenow-prod.fluidtopics.net/zKvvJ~woONAARtQWDnLzkQ "Configure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents.")
* [View and update Security Incident Response system properties](https://servicenow-prod.fluidtopics.net/dQgedytB1~M7u70FoX9_oA "View and update the Security Incident Response Workspace system properties from the Security Incident Response Workspace administration panel to access and update the required properties.")
* [Timeline in Security Incident Response Workspace](https://servicenow-prod.fluidtopics.net/U3c3lwBFolisJEn2MEJSmg "The timeline provides a chronological view of events related to a security incident. Events appear as point events or range events. Administrators can configure which events appear on the timeline and what details are shown in event popovers.")  
**Related tasks**   

* [Define the new Risk Score Calculator Rules](https://servicenow-prod.fluidtopics.net/ccv9hx8vlS4KWyZ44meslQ "Use the new Risk Score Calculator to define and calculate the risk score of security incidents based on the user-defined criteria, which provide a transparent intelligence scoring of security incidents. The risk score is auto-calculated for the security incident records.")
* [Create quick filters for Security Incidents and Response Tasks lists](https://servicenow-prod.fluidtopics.net/SzkWp6I2kcU8DCTa3RrrTw "Create quick filters to create reusable, predefined filters that appear on the security incidents and response tasks list pages enabling security analysts to filter the list items without adding the filter conditions each time.")