Configure a skill for ServiceNow Otto for Security Incident Response \(SIR\)

---
title: Configure a skill for ServiceNow Otto for Security Incident Response \(SIR\)
description: Configure and review the details for a skill in the Guided Setup. You can edit and reactivate a skill from the Guided Setup.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/activate-skills-for-now-assist-security-incident.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [Now Assist Security Operations, skill configuration]
breadcrumb: [Configure ServiceNow Otto for Security Incident Response \(SIR\), Configure, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Configure a skill for ServiceNow Otto for Security Incident Response \(SIR\)

Configure and review the details for a skill in the Guided Setup. You can edit and reactivate a skill from the Guided Setup.

## Before you begin

**Note:** Depending on your license, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents. For more information, see [ServiceNow product tiers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/ai-native-sku-overview.md).

Role required: sn\_si.admin

## About this task

**Important:** Some generative AI skills, AI agents, and agentic workflows are turned on by default. For more information, see [AI agents, skills, and agentic workflows on by default](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/now-assist-skills-on-by-default.md).

## Procedure

1.  Navigate to **Admin** > **AI Admin Hub** > **AI Skills**.

2.  Select **Technology** > **Security Operations**.

3.  Select **Edit** for the skill you want to configure, and follow the Guided Setup.

    You can edit only the active options in the left panel and the editable options might vary for individual skills. For more configurable options, copy a skill and customize it. For more information, see [Customize a skill](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/cust-now-assist-security-incident-skill.md).

4.  Select **Review and Activate** to review your inputs and activate the skill.

5.  Select **Done** to complete the configuration.

    The modified skill is active and available for use.


-   **[Configure the Security incident quality assessment skill](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/config-quality-assessment-skill.md)**  
Add natural language rule sets to the Security incident quality assessment skill. Security analysts use these rules to generate a quality assessment report for security incidents.
-   **[Configure the Security incident resolution plan skill](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/config-resolution-plan-skill.md)**  
Add your existing runbooks to the resolution plan generation skill. The runbooks provide additional context to the resolution plan generation skill.

**Parent Topic:**[Configuring ServiceNow Otto for Security Incident Response \(SIR\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configuring-now-assist-for-security-operations.md)