---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Secureworks CTP Ticket Ingestion Integration

# Secureworks CTP Ticket Ingestion Integration {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Secureworks Counter Threat Platform ticket ingestion integration enables you to
automatically fetch Secureworks CTP tickets, convert them into security
incidents and perform automated response actions.

The key features of this integration include:

* Automatic ingestion of selected tickets (including attachments) based on a pre-defined schedule.
* Mapping of ticket and event fields to Security Incident Response fields.
* Preview of security incidents mapped to the ticket fields.
* Filtering and aggregation of tickets.
* On demand retrieval of events associated with a ticket.
* Periodic tracking of key updates to tickets.
* Automating ticket updates and closures based on SIR incident status
* Master ticket update.
* Synchronization of Secureworks worklogs with Security Incident Response worknotes.
{#secureworks-ctp-about__ul_mc5_ypt_tmb}