Create response tasks · SN Doc Reader

After a security incident has been created, you can create response tasks to track separate actions to be performed to respond to the security issue.

Before you begin

Important: If you are unable to create a response task, verify that no custom ACLs on the task table are blocking access.

Role required: sn_si.basic

Procedure

Navigate to the appropriate location to open the security incident for which you want to create tasks.

For example:
- To create a response task based on a security incident assigned to you, select Security Incident > Incidents > Assigned to Me.
- To create a response task based on a security incident assigned to your team, select Security Incident > Incidents > Assigned to Team > Incidents.
- To create a response task based on an unassigned security incident, select Security Incident > Incidents > Unassigned Incidents.
Open the security incident for which you want to add response tasks.
Select the Add Response Task button in the form header.

Note: To create any other task, select the Tasks tab in the incident Related List.
Fill in the fields on the form, as appropriate.

Field	Description
Select security tag	If you set up and activated security tags, you can select one or more tags to add metadata to the record or specify the degree of sensitivity of the response task. If you did not set up or activate security tags, this drop-down list is not displayed.
Number	[Read only] The automatically generated Security Incident Response number.
Parent	[Read only] The number of the related security incident.
Configuration Item	The configuration item (resource) affected by the security issue.
Affected User	The person affected by the security issue.
Priority	The priority used to determine when this task is performed.
State	The current state of the security response task. Upon task creation, this field defaults to Draft.
Skills	The skill required to perform this task. Select the lock icon and select the skill required. After you have completed your selections, select the lock icon again.
Assignment group	The assignment group from which the assigned worker is selected.Note: Select an external group if you want to provide the read-only access of the parent security incident of this response task.
Assigned to	The individual assigned to perform the task.
Access to security incident	Option to provide the read-access to the parent security incident of this response task.
Short description	A description of the Security Incident Response task.
Description	A description for the selected task.
Secure notes	The work notes that are encrypted and not visible to the customer.
Work notes	The work notes that aren’t visible to the customer.
Comments	Comments that you want to be visible to the customer.
Email	Option to send email to the stakeholders.

5. When you have completed your entries, select **Submit**.

**Note:** After you have created Security Incident Response tasks, you can view them using any of the following applications under the **Response Tasks** module:

-   **Assigned to Me**.
-   **Assigned to Team**.
-   **Show Open Tasks**
-   **Show All Tasks**
-   **Unassigned Tasks**.

title	Create response tasks
description	After a security incident has been created, you can create response tasks to track separate actions to be performed to respond to the security issue.
locale	en-US
canonical_url	https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/t\_CreateResponseTask.html
release	australia
product	Security Incident Response
classification	security-incident-response
topic_type	task
last_updated	2026-09-10
reading_time_minutes	2
breadcrumb	Record creation from security incidentsSecurity incident creationSecurity Incident ResponseEnterprise security case management applicationsSecurity Operations