Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.
  • Madrid
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store

Add closure information to a security incident

Log in to subscribe to topics and get notified when content changes.

Add closure information to a security incident

When a security incident is in the Review or Closed state, you can enter closure information.

Before you begin

Role required: sn_si.basic


  1. If it is not already open, open the security incident you want to update.
  2. Click the Related Records tab.
  3. Fill in the fields, as needed.
    Field Description
    Create knowledge article Select this check box to generate a knowledge article using the contents of the post incident report.
    Close code Select the close code that best describes the reason for closing the security incident.
    Closed by [Read only] Displays the user who closed the security incident.
    Closed [Read only] Displays the date and time the security incident was closed.
    Close notes How the security incident has been closed, including lessons learned, resolution, and so on.
  4. Click any of the following tabs to further update the security incident:
  5. When you have completed your entries, click Submit.