SIR Workspace plugins
reference australia Updated Sep 10, 2026 1 min read components-installed-with-analyst-workspace.md
The following are the required applications to work with Security Incident Response Workspace (sn_si_aw) plugin.
Applications
Installing the Security Incident Response application version 13.4.5 or later automatically installs the Security Incident Response Workspace and the following apps.
- Enterprise Security Case Management PAD Commons [sn_escm_pad_cmn]
- Security Operations Common Workspace [sn_escm_ws_cmn]
- Security Incident UI Card Component [sn_sirw_evam]
- Security Operations spoke [sn_sec_spoke]
Important:
- Installing the Security Incident Response 13.4.5 version or later from the ServiceNow Store automatically installs the Security Incident Response Workspace (sn_si_aw) 1.5.1 version or later by default.
- The Security Incident Response Workspace versions 1.5.1 and above can only be installed/upgraded through an installation/upgradation of Security Incident Response and can’t be installed independently.
Enterprise Security Case Management PAD Commons requires the Playbook Experience [playbook_experience] plugin.
For information on the Security Incident Response roles, tables, properties, and scheduled jobs, see Components installed with Security Incident Response.
Parent Topic:Exploring SIR Workspace
Related topics
SIR Workspace interface overview
54 lines · 2.5 KB
--- title: SIR Workspace plugins description: The following are the required applications to work with Security Incident Response Workspace \(sn\_si\_aw\) plugin. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/components-installed-with-analyst-workspace.html release: australia product: Security Incident Response classification: security-incident-response topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Explore, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations] --- # SIR Workspace plugins The following are the required applications to work with Security Incident Response Workspace \(sn\_si\_aw\) plugin. ## Applications Installing the Security Incident Response application version 13.4.5 or later automatically installs the Security Incident Response Workspace and the following apps. - Enterprise Security Case Management PAD Commons \[sn\_escm\_pad\_cmn\] - Security Operations Common Workspace \[sn\_escm\_ws\_cmn\] - Security Incident UI Card Component \[sn\_sirw\_evam\] - Security Operations spoke \[sn\_sec\_spoke\] **Important:** - Installing the Security Incident Response 13.4.5 version or later from the ServiceNow Store automatically installs the Security Incident Response Workspace \(sn\_si\_aw\) 1.5.1 version or later by default. - The Security Incident Response Workspace versions 1.5.1 and above can only be installed/upgraded through an installation/upgradation of Security Incident Response and can’t be installed independently. **Enterprise Security Case Management PAD Commons** requires the Playbook Experience \[playbook\_experience\] plugin. For information on the Security Incident Response roles, tables, properties, and scheduled jobs, see [Components installed with Security Incident Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/installed-with-sir.md). **Parent Topic:**[Exploring SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/exploring-security-incident-response-workspace.md) **Related topics** [SIR Workspace features]() [SIR Workspace interface overview]() [Upcoming section]() [Quick links section]() [Shift Handover Records section]() [List view in SIR Workspace]()
| title | SIR Workspace plugins |
| description | The following are the required applications to work with Security Incident Response Workspace \(sn\_si\_aw\) plugin. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/components-installed-with-analyst-workspace.html |
| release | australia |
| product | Security Incident Response |
| classification | security-incident-response |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | ExploreSecurity Incident Response WorkspaceSecurity Incident ResponseEnterprise security case management applicationsSecurity Operations |