Configuration items in cases

---
title: Configuration items in cases
description: You can create a new case from one or more configuration items \(CI\) in the Configuration Item \[cmdb\_ci\] table. You can also add CIs to existing cases.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/cases-from-cis.html
release: australia
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Case creation from security artifacts, Security Case Management, Threat Intelligence, Enterprise security case management applications, Security Operations]
---

# Configuration items in cases

You can create a new case from one or more configuration items \(CI\) in the Configuration Item \[cmdb\_ci\] table. You can also add CIs to existing cases.

-   **[Create a case from CIs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/create-cases-from-CIs.md)**  
You can create a security case from configuration items in the Configuration Item \[cmdb\_ci\] table. After the CIs have been used to create a new case, you can use Security Case Management to analyze the data.
-   **[Add CIs to existing cases](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/add-cis-to-cases-sir.md)**  
You can add configuration items to one or more existing cases. After the CIs have been added to cases, you can use Security Case Management to analyze the data.

**Parent Topic:**[Case creation from security artifacts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/case-creation-from-security-artifacts.md)

**Related topics**  


[IoCs and observables in cases]()

[Security incidents in cases]()

[Affected users in cases]()