Security Incident Response knowledge base Your organization can create and maintain articles in the security incident knowledge base to share security information, document the types of cyber threats that your organization faces, and provide answers and responses to these threats. Benefits of the security incident knowledge base include the following. Employees have one source of information that is easy to search. Information can be kept up-to-date, as knowledge articles have a defined life cycle: create, review and update, publish, and retire. Users are provided with a list of relevant articles when they enter a short description to create a security request, incident, or response task. It is important to assign a knowledge manager to each security incident knowledge base.