Secureworks CTP Master Ticket Closure Notice

---
title: Secureworks CTP Master Ticket Closure Notice
description: Before you close a security incident created by a Secureworks CTP master ticket, you must verify that all child tickets associated with the master ticket are closed.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/secureworks-ctp-master-ticket-closure.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [View Secureworks ticket, Secureworks CTP Ticket Ingestion Integration, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Secureworks CTP Master Ticket Closure Notice

Before you close a security incident created by a Secureworks CTP master ticket, you must verify that all child tickets associated with the master ticket are closed.

## Before you begin

Role required: sn\_si.admin

## Procedure

1.  Navigate to **All** > **Secureworks Ticket Ingestion** > **Secureworks Ticket to Task**.

    The Secureworks CTP tickets with their corresponding security incidents are displayed.

2.  Select on the security incident with the **isGlobalParent** field set to **true.**

3.  Change the security incident State to **Closed**, specify the close codes and select **Save**.

4.  Add a note requesting closure of the Master Ticket in Secureworks and select **Submit Request**.

    The Master Ticket is now reassigned to the Secureworks SOC team.

5.  Once the request has been submitted, you can close the security incident.

6.  Navigate to **Application** > **Module**.