Exploring SIR Workspace

concept australia Updated Sep 10, 2026 1 min read exploring-security-incident-response-workspace.md

Explore Security Incident Response Workspace to understand how the security analysts and managers perform their day-to-day operations with an improved user experience, do a complete incident investigation, and get an overview of the security incidents, response tasks and SLAs assigned to the security analyst and team.

This section describes the following:

SIR Workspace plugins and required roles.
Key SIR Workspace features.
SIR Workspace plugins
The following are the required applications to work with Security Incident Response Workspace (sn_si_aw) plugin.
SIR Workspace features
The Security Incident Response Workspace consists of the following key features.
SIR Workspace interface overview
The SIR Workspace Overview page consists of the Security Incidents and Response Tasks details that are under security analysts and their team.
Upcoming section
This section displays the upcoming tasks such as the security incidents and response tasks that are due as on the same day and next day.
Quick links section
Quick links work like bookmark links. You can add external URLs and quickly access them from within the workspace.
Shift Handover Records section
The section displays the list of Shift Handover records in the Security Incident Response Workspace.
List view in SIR Workspace
The list view consists of the security incidents, response tasks, phishing emails, and assessments.

Parent Topic:Security Incident Response Workspace

41 lines · 3.7 KB Wrap lines

---
title: Exploring SIR Workspace
description: Explore Security Incident Response Workspace to understand how the security analysts and managers perform their day-to-day operations with an improved user experience, do a complete incident investigation, and get an overview of the security incidents, response tasks and SLAs assigned to the security analyst and team.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/exploring-security-incident-response-workspace.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Exploring SIR Workspace

Explore Security Incident Response Workspace to understand how the security analysts and managers perform their day-to-day operations with an improved user experience, do a complete incident investigation, and get an overview of the security incidents, response tasks and SLAs assigned to the security analyst and team.

This section describes the following:

-   SIR Workspace plugins and required roles.
-   Key SIR Workspace features.

-   **[SIR Workspace plugins](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/components-installed-with-analyst-workspace.md)**  
The following are the required applications to work with Security Incident Response Workspace \(sn\_si\_aw\) plugin.
-   **[SIR Workspace features](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/key-features.md)**  
The Security Incident Response Workspace consists of the following key features.
-   **[SIR Workspace interface overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/overview.md)**  
The SIR Workspace Overview page consists of the Security Incidents and Response Tasks details that are under security analysts and their team.
-   **[Upcoming section](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/upcoming-section.md)**  
This section displays the upcoming tasks such as the security incidents and response tasks that are due as on the same day and next day.
-   **[Quick links section](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/quick-links.md)**  
Quick links work like bookmark links. You can add external URLs and quickly access them from within the workspace.
-   **[Shift Handover Records section](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/shift-handover-records-section.md)**  
The section displays the list of Shift Handover records in the Security Incident Response Workspace.
-   **[List view in SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/setting-up-list-view-in-analyst-workspace.md)**  
The list view consists of the security incidents, response tasks, phishing emails, and assessments.

**Parent Topic:**[Security Incident Response Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/sir-workspace-landing-page.md)