Escalate a security incident

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • If an escalation path exists for a security incident, the Escalate button is available in the security incident header.

    Before you begin

    Role required: sn_si.admin

    You must have an escalation group created to see this button. See Create a Security Operations user-defined escalation group for more information.

    Procedure

    1. Navigate to All > Security Incident > Show Open Incidents.
    2. Open the incident you want to escalate.
    3. Select the Escalate button.
    4. Choose an escalation group.
    5. Enter a reason for the escalation.
    6. Select Submit.
      Updates Assignment Group and Assigned to on the security incident.