---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Create from Event Management alert

# Create a security incident from an Event Management alert {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

When Event Management is activated, you can manually create security incidents from
the Alert form.

## Before you begin

The Event Management plugin requires a separate subscription and must be activated by ServiceNow personnel. This plugin includes demo data and activates related plugins if they are not already active. The Service Analytics is activated automatically when Event Management is activated.

Role required: evt_mgmt_admin, evt_mgmt_operator, or
evt_mgmt_user

## Procedure

1. Navigate to AllEvent ManagementAll Alerts.
2. Click the alert Number.
3. Click Create Security incident.
4. Click Update.
{#manually-create-si-from-em-alert__steps_wsj_y3g_sy}

*[\>]: and then