Category management in Security Incident Response
concept brazil Updated Sep 10, 2026 2 min read category-management-sir.md
Configure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents.
- Create a security incident category
Create a security incident category to use to classify security incidents in Security Incident Response Workspace. - Create a security incident subcategory
Create subcategories for a category for a deeper classification of a security incident in Security Incident Response Workspace.
Parent Topic:Configuring SIR Workspace
Related topics
Configuring ServiceNow Otto for Security Incident Response (SIR)
Configure SI design time investigation
Define the new Risk Score Calculator Rules
Security Incident Response conference call integration
Configure report templates in Security Incident Response
On-Call scheduling in Security Incident Response
View and update Security Incident Response system properties
Create quick filters for Security Incidents and Response Tasks lists
53 lines · 2.4 KB
--- title: Category management in Security Incident Response description: Configure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents. locale: en-US canonical_url: https://www.servicenow.com/docs/r/security-management/security-incident-response/category-management-sir.html release: brazil product: Security Incident Response classification: security-incident-response topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 2 breadcrumb: [Configure, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Category management in Security Incident Response Configure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents. - **[Create a security incident category](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/security-incident-response/create-category-sir.md)** Create a security incident category to use to classify security incidents in Security Incident Response Workspace. - **[Create a security incident subcategory](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/security-incident-response/create-subcategory-sir.md)** Create subcategories for a category for a deeper classification of a security incident in Security Incident Response Workspace. **Parent Topic:**[Configuring SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/security-incident-response/configuring-security-incident-response-workspace.md) **Related topics** [Configuring ServiceNow Otto for Security Incident Response \(SIR\)]() [Set up view of SIR Records]() [Configure SI design time investigation]() [SIR Workspace Related Records]() [Define the new Risk Score Calculator Rules]() [Configure Shift Handover]() [Security Incident Response conference call integration]() [Configure report templates in Security Incident Response]() [On-Call scheduling in Security Incident Response]() [View and update Security Incident Response system properties]() [Create quick filters for Security Incidents and Response Tasks lists]() [Timeline in Security Incident Response Workspace]()
| title | Category management in Security Incident Response |
| description | Configure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/security-management/security-incident-response/category-management-sir.html |
| release | brazil |
| product | Security Incident Response |
| classification | security-incident-response |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| breadcrumb | ConfigureSecurity Incident Response WorkspaceSecurity Incident ResponseEnterprise security case management applicationsSecurity Operations |