Link the vulnerability assessment record to major security incident in Major Security Incident Management

task australia Updated Sep 10, 2026 1 min read link-vuln-assessment-msim-vr-va-ws.md

You can link, propose or promote the assessment record to a Major Security Incident provided you have access to the Major Security Incident Management application.

Before you begin

Role required: sn_vul_analyst.vul_event_manager, sn_si.analyst, sn_msi.workspace_admin

About this task

You can move the assessment record to be associated with an existing major security incident, create a new MSI from the assessment record or promote the vulnerability assessment record to a major security incident. Leverage the Major Security Incident Management features such as the integrations with Microsoft Teams and Microsoft SharePoint.

You can also view the link to major security incidents on the Vulnerability Manager Workspace for vulnerable items. The MSIM link will be associated with the vulnerable assessment which will be shown on the vulnerability items and as well as on the other workspaces of Vulnerability Response.

Procedure

Navigate to Workspaces > Vulnerability Assessment Workspace.
Select the assessment record you want to link to a major security incident.
Select the More Actions icon, on the Details tab.
Select one of the following.

Link to Major Security Incident

Select the existing MSI record from the list of Major Security Incidents.The vulnerability assessment record is linked to the existing major security incident.

Propose as Major Security Incident

Enter the following details and select Propose.- Detection Date

Justification
Potential Impact

Promote as Major Security Incident

Enter the following details and select Promote.- Detection Date

Estimated resolution date
Justification
Potential Impact

5. Select **Save**.

What to do next

Select the MSI record to open the record in the Major Security Incident Management view.

Related topics

Link to Major Security Incident

Propose as a Major Security Incident

Promote to a Major Security Incident

87 lines · 3.5 KB Wrap lines

---
title: Link the vulnerability assessment record to major security incident in Major Security Incident Management
description: You can link, propose or promote the assessment record to a Major Security Incident provided you have access to the Major Security Incident Management application.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/link-vuln-assessment-msim-vr-va-ws.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Exploring vulnerability assessment, Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Link the vulnerability assessment record to major security incident in Major Security Incident Management

You can link, propose or promote the assessment record to a Major Security Incident provided you have access to the Major Security Incident Management application.

## Before you begin

Role required: sn\_vul\_analyst.vul\_event\_manager, sn\_si.analyst, sn\_msi.workspace\_admin

## About this task

You can move the assessment record to be associated with an existing major security incident, create a new MSI from the assessment record or promote the vulnerability assessment record to a major security incident. Leverage the Major Security Incident Management features such as the integrations with Microsoft Teams and Microsoft SharePoint.

You can also view the link to major security incidents on the Vulnerability Manager Workspace for vulnerable items. The MSIM link will be associated with the vulnerable assessment which will be shown on the vulnerability items and as well as on the other workspaces of Vulnerability Response.

## Procedure

1.  Navigate to **Workspaces** &gt; **Vulnerability Assessment Workspace**.

2.  Select the assessment record you want to link to a major security incident.

3.  Select the **More Actions** icon, on the **Details** tab.

4.  Select one of the following.

<table id="choicetable_zgd_f45_gzb"><tbody><tr><td id="d84574e115">

**Link to Major Security Incident**

</td><td>

Select the existing MSI record from the list of Major Security Incidents.The vulnerability assessment record is linked to the existing major security incident.

</td></tr><tr><td id="d84574e126">

**Propose as Major Security Incident**

</td><td>

Enter the following details and select **Propose**.-   Detection Date
-   Justification
-   Potential Impact


</td></tr><tr><td id="d84574e149">

**Promote as Major Security Incident**

</td><td>

Enter the following details and select **Promote**.-   Detection Date
-   Estimated resolution date
-   Justification
-   Potential Impact


</td></tr></tbody>
</table>5.  Select **Save**.


## What to do next

Select the MSI record to open the record in the Major Security Incident Management view.

**Related topics**  


[Link to Major Security Incident](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/link-si-msi.md)

[Propose as a Major Security Incident](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/propose-as-msi.md)

[Promote to a Major Security Incident](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/promote-msi.md)