Before you run the Security Incident Response new UI in your instance, you must download it from the ServiceNow® Store and install it.

Before you begin

To ensure a smooth installation, verify that you have the required ServiceNow roles for your instance. The following roles are required for installation, configuration, and verification of expected results:
  • If not already assigned, the System Administrator [admin] installs the application and assigns the Security Incident Response Admin [sn_si.admin] role.
  • The Security Incident Response Admin [sn_si.admin] oversees configuration and verifies expected results.
Role required: admin

Procedure

  1. Follow the instructions for downloading an application from the ServiceNow Store and install the Security Incident Response UI application.
  2. After installation is complete, you can open the Security Analyst Workspace by navigating to Security Incident > Incidents (New UI)
    Security Incident navigation bar