Escalate a security incident

---
title: Escalate a security incident
description: If an escalation path exists for a security incident, the Escalate button is available in the security incident header.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/escalate-security-incident.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Managing security incidents and inbound requests, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Escalate a security incident

If an escalation path exists for a security incident, the Escalate button is available in the security incident header.

## Before you begin

Role required: sn\_si.admin

You must have an escalation group created to see this button. See [Create a Security Operations user-defined escalation group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/create-user-defined-escalation-group.md) for more information.

## Procedure

1.  Navigate to **All** > **Security Incident** > **Show Open Incidents**.

2.  Open the incident you want to escalate.

3.  Select the **Escalate** button.

4.  Choose an escalation group.

5.  Enter a reason for the escalation.

6.  Select **Submit.**

    Updates **Assignment Group** and **Assigned to** on the security incident.