---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# SIR Workspace features

# SIR Workspace features {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Security Incident Response Workspace consists of the following key
features.
* Overview section
* Upcoming section
* Quick Links section
* Shift Handover Records section
* List view
* Multi-tab interface that supports opening multiple security incidents
* AI Search to find Security Incidents, Response Tasks, Observables, Security Requests, and Indicators of Compromise across the workspace. Filter results by State, Assigned to, Category, Severity, Finding, Type, Configuration Item, and Affected User. For more information about AI Search, see [AI Search](https://www.servicenow.com/docs/r/ai-search/ai-search).

{#key-features__ul_dfw_lvl_gbc} Figure 1. SIR Workspace key features
**Related concepts**   

* [SIR Workspace interface overview](https://servicenow-prod.fluidtopics.net/~TZjXfpt806pAVTxJdvewA "The SIR Workspace Overview page consists of the Security Incidents and Response Tasks details that are under security analysts and their team.")
* [Upcoming section](https://servicenow-prod.fluidtopics.net/PYIvFKoYWjA3UhvVIOAXZA "This section displays the upcoming tasks such as the security incidents and response tasks that are due as on the same day and next day.")
* [Quick links section](https://servicenow-prod.fluidtopics.net/94_97N0fwDf7ASqbiWHc2A "Quick links work like bookmark links. You can add external URLs and quickly access them from within the workspace.")
* [Shift Handover Records section](https://servicenow-prod.fluidtopics.net/UXY0oW6ISmUwjCVrPnl48g "The section displays the list of Shift Handover records in the Security Incident Response Workspace.")
* [List view in SIR Workspace](https://servicenow-prod.fluidtopics.net/bStXEweV_IdnZ_UD5B0G9g "The list view consists of the security incidents, response tasks, phishing emails, and assessments.")  
**Related reference**   

* [SIR Workspace plugins](https://servicenow-prod.fluidtopics.net/DT9niT7CHKbBFZbGrlMamw "The following are the required applications to work with Security Incident Response Workspace (sn_si_aw) plugin.")