Resolve security incidents

concept australia Updated Sep 10, 2026 1 min read now-assist-sir-resolve-incident-ai-workflow.md
Raw file servicenow.com

Chat with an AI agent in the ServiceNow Otto panel to help you create a resolution plan for a security incident and to resolve it.

Resolve security incident agentic workflow overview

Use the Resolve security incident agentic workflow to fetch incident details, knowledge articles and similar closed security incidents, get a resolution plan, and resolve the security incident.

To modify this agentic workflow, duplicate it, adjust the settings to suit your specific needs, and activate the duplicated version of the agentic workflow instead.

Agents used in the Resolve security incident agentic workflow

The Resolve security incident agentic workflow contains the following AI agents:

  • Security incident resolution AI agent

  • Exchange online integration handling AI agent

  • Security incident wrap up generator AI agent

  • Observable analysis AI agent

  • Security incident activities handling AI agent

  • EDR AI agent

  • Resolve a security incident
    Chat with an AI agent in the ServiceNow Otto panel to resolve an incident.

Parent Topic:Using agentic AI workflows

Search documentation
Search document titles and file paths on the australia branch