Resolve security incidents
Chat with an AI agent in the ServiceNow Otto panel to help you create a resolution plan for a security incident and to resolve it.
Resolve security incident agentic workflow overview
Use the Resolve security incident agentic workflow to fetch incident details, knowledge articles and similar closed security incidents, get a resolution plan, and resolve the security incident.
To modify this agentic workflow, duplicate it, adjust the settings to suit your specific needs, and activate the duplicated version of the agentic workflow instead.
Agents used in the Resolve security incident agentic workflow
The Resolve security incident agentic workflow contains the following AI agents:
-
Security incident resolution AI agent
-
Exchange online integration handling AI agent
-
Security incident wrap up generator AI agent
-
Observable analysis AI agent
-
Security incident activities handling AI agent
-
EDR AI agent
-
Resolve a security incident
Chat with an AI agent in the ServiceNow Otto panel to resolve an incident.
Parent Topic:Using agentic AI workflows
--- title: Resolve security incidents description: Chat with an AI agent in the ServiceNow Otto panel to help you create a resolution plan for a security incident and to resolve it. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/now-assist-sir-resolve-incident-ai-workflow.html release: australia product: Security Incident Response classification: security-incident-response topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Use agentic workflows, Use, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Resolve security incidents Chat with an AI agent in the ServiceNow Otto panel to help you create a resolution plan for a security incident and to resolve it. ## Resolve security incident agentic workflow overview Use the Resolve security incident agentic workflow to fetch incident details, knowledge articles and similar closed security incidents, get a resolution plan, and resolve the security incident. To modify this agentic workflow, [duplicate](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/clone-aia-usecase.md) it, adjust the settings to suit your specific needs, and activate the duplicated version of the agentic workflow instead. ## Agents used in the Resolve security incident agentic workflow The Resolve security incident agentic workflow contains the following AI agents: - Security incident resolution AI agent - Exchange online integration handling AI agent - Security incident wrap up generator AI agent - Observable analysis AI agent - Security incident activities handling AI agent - EDR AI agent - **[Resolve a security incident](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/resolve-sir-incident-aiagent.md)** Chat with an AI agent in the ServiceNow Otto panel to resolve an incident. **Parent Topic:**[Using agentic AI workflows](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/using-now-assist-ai-agents-sir.md)
| title | Resolve security incidents |
| description | Chat with an AI agent in the ServiceNow Otto panel to help you create a resolution plan for a security incident and to resolve it. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/now-assist-sir-resolve-incident-ai-workflow.html |
| release | australia |
| product | Security Incident Response |
| classification | security-incident-response |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Use agentic workflowsUseSecurity Incident Response WorkspaceSecurity Incident ResponseEnterprise security case management applicationsSecurity Operations |