Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Propose, promote, and link incident records

Propose or promote security incidents as major security incidents when incidents are identified as critical threat to the organization.

Once Major Security Incident Management is installed on your ServiceNow instance, you can handle the transition of security incidents to major incidents as follows:

  • Propose a security incident to major security incident candidate to initiate a review process.
  • Directly promote a security incident to a major security incident without a review process.
  • Reject a security incident proposed as a major security incident.

You can also link a security incident as a child incident to the major security incident so that all related security incidents can be tracked together.

Parent Topic:Using Major Security Incident Management

Related topics

Using MSI List view in the MSIM workspace

View Major Security Incident impact metrics

View Major Security Incident trend charts

Update Major Security Incident details

Link additional records to Major Security Incident

Unlink records from Major Security Incident

Manage tasks in a Major Security Incident

Track collaboration activity via MSIM workspace

Create and distribute MSIM Status Reports