---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Link to Major Security Incident

# Link to Major Security Incident {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Link a security incident to a major security incident as child security
incident(s).

## Before you begin

Role required: sn_si.analyst.

## Procedure

1. Navigate to WorkspacesSecurity Incident Response Workspace.
2. Open any security incident.
3. Click Link to Major Security Incident.  
4. Select the incident(s) to link to a major security incident.
5. Click Link.
6. The incident record is linked as a child incident of the major security incident.  
   After the incident is linked as a child incident to a major security incident, Major Security Incident tag is applied and displayed on the form banner.
{#link-to-major-security-incident__steps_v4y_ttb_rvb}

*[\>]: and then