Skip to content
Major Security Incident Management › Security Incident Response › Enterprise security case management applications › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Using Major Security Incident Management

Managers can use Major Security Incident Management workspace to view the proposed, promoted, linked, and rejected incident records and track their related activities.

  • Propose, promote, and link incident records
    Propose or promote security incidents as major security incidents when incidents are identified as critical threat to the organization.
  • Using MSI List view in the MSIM workspace
    With the list view in the MSIM workspace, you can view proposed, promoted, and rejected major security incidents.
  • View Major Security Incident impact metrics
    Provides up-to-date summary reporting of the impact and progress of major security incidents, which is an important aspect of managing a major security incident using the new workspace.
  • View Major Security Incident trend charts
    View the major security incident impact progress metrics visualized as bar graphs and charts.
  • Update Major Security Incident details
    View and update specific details related to the major security incident such as Incident Record Details, Active Team participants, and the corresponding activity log.
  • Link additional records to Major Security Incident
    In the workspace, use the linking records functionality to link any related Security Incident records and its child security incidents, Remediation Tasks from Vulnerability Response, and Security Cases from Threat Intelligence to a Major Security Incident (MSI) record.
  • Unlink records from Major Security Incident
    Using the Major Security Incident Management workspace, unlink the major security incident records from the Linked Records section.
  • Manage tasks in a Major Security Incident
    The Task tab enables you to track and manage all the tasks associated with a major security incident from the MSIM workspace. You can view the various tasks using the default Visual Task Board (Kanban view) or the List view.
  • Track collaboration activity via MSIM workspace
    Track chat and file activities related to resolving major security incidents through the MSIM Workspace.
  • Create and distribute MSIM Status Reports
    As a Major Security Incident (MSI) manager, you can create and distribute the different status reports to different stakeholders at various intervals based on the configured report template or a previous status report throughout the course of the major security incident resolution.

Parent Topic:Major Security Incident Management