---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Propose as Major Security Incident

# Propose as Major Security Incident {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Propose a security incident as a Major Security Incident (MSI).

## Before you begin

Role required: sn_si.analyst.

## Procedure

1. Navigate to WorkspacesSecurity Incident Response Workspace.
2. Open any security incident.
3. Click Propose to Major Security Incident.  
4. On the form, fill in the fields such as Detection date, Justification, and Potential impact.
5. Click Propose.  
   The incident record is proposed as a major security incident candidate.  
   After the incident record is proposed as a major security incident candidate, Major Security Incident Candidate tag is applied and displayed on the security incident form banner.  
   Note:  
   Click Unlink from Major Security Incident to unlink the incident if you don't wish to propose or doesn't have any critical impact. The incident will be unlinked and lists under the list view to the security analyst for remediation.
{#propose-to-major-security-incident__steps_v4y_ttb_rvb}

*[\>]: and then