On-Call scheduling in Security Incident Response

---
title: On-Call scheduling in Security Incident Response
description: Use On-Call Scheduling in Security Incident Response to view and manage shifts for your analysts.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/on-call-schedule-sir.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Configure, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# On-Call scheduling in Security Incident Response

Use On-Call Scheduling in Security Incident Response to view and manage shifts for your analysts.

With the On-Call Scheduling feature, you can view and manage shifts, approve or reject absence requests. You can also manage notification preferences, delivery channels, escalation trigger rules, and policies for your group.

## Key features for sn\_si.manager/rota\_manager

-   View the on-call schedule including any gaps and time-off requests for your group.
-   Approve or reject time-off requests.
-   Review and manage gaps and conflicts.
-   Provide, replace, or delete coverage and delete time-off requests.
-   Create a shift and add or delete members to the shift.
-   View escalation, group, and performance reports.

## Key features for sn\_si.analyst/oc\_read

-   View your on-call schedules and see the other members of your shift.
-   Submit a time-off request and refer another member of the group to cover your shift.
-   Specify your availability and your preferred contact methods.
-   View the members and escalation details for a shift.

## Documentation for On-call Scheduling

For detailed information on configuring and using On Call Scheduling features, refer to the IT Service Management [On-Call Scheduling](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/it-service-management/c_OnCallScheduling.md) documentation.

**Parent Topic:**[Configuring SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configuring-security-incident-response-workspace.md)

**Related topics**  


[Configuring ServiceNow Otto for Security Incident Response \(SIR\)]()

[Set up view of SIR Records]()

[Configure SI design time investigation]()

[SIR Workspace Related Records]()

[Define the new Risk Score Calculator Rules]()

[Configure Shift Handover]()

[Security Incident Response conference call integration]()

[Configure report templates in Security Incident Response]()

[Category management in Security Incident Response]()

[View and update Security Incident Response system properties]()

[Create quick filters for Security Incidents and Response Tasks lists]()

[Timeline in Security Incident Response Workspace]()