---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Process-based Playbooks

# Process-based Playbooks {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The playbook component works only for playbooks built in Workflow Studio and not for flows. However, existing flow-based playbooks will continue to work and the activities will be continuing to be rendered as response tasks.

Security Incident Response provides the following playbooks with the base system.
* **[Playbook for Manual Phishing](https://servicenow-prod.fluidtopics.net/YziPazcjM9xw~wgjffb2DA)**   
  The Manual Phishing Playbook provides step-by-step guidance for your analysts on how they can manually resolve specific types of security threats in your phishing activities.
* **[Playbook for Automated Phishing](https://servicenow-prod.fluidtopics.net/8caPmztNTfZwggoFIpH8lw)**   
  The Automated Phishing playbook provides step-by-step guidance for your analysts on how they could resolve specific types of security threats in your Automated Phishing activities.
* **[Playbook for Manual Malware](https://servicenow-prod.fluidtopics.net/7fBt0sC1RiOfB1xCsbm9Zw)**   
  The Manual Malware playbook provides step-by-step guidance on how analysts can manually resolve malware alerts more efficiently.
* **[Playbook for Automated Malware](https://servicenow-prod.fluidtopics.net/KfMKrNYRxIRzECYSRYnwIA)**   
  The Automated Malware playbook provides a sequence of automated steps that helps analysts resolve malware alerts more efficiently.
* **[Playbook for Failed Login Manual](https://servicenow-prod.fluidtopics.net/9X0F1Qwl~4BVaslFVE8MYw)**   
  The Failed Login Manual playbook provides guidance and helps optimize the investigation of failed login security incidents.

**Related concepts**   

* [Flow-based Playbooks](https://servicenow-prod.fluidtopics.net/Qa8wU41p3~~e0e0kflu_5g "Using the Flow Designer, security administrators and flow design authors can more easily transition from manual or undocumented playbooks to automated and repeatable playbooks. The drag-and-drop feature provides flexibility in moving objects, condition checks, parallel branching, decision tables, and more.")