---
title: Security Operations spoke
description: Provides Security Operations actions for flow designers to manage Security Incident Response flow templates.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/build-workflows/workflow-studio/secops-spoke.html
release: australia
product: Workflow Studio
classification: workflow-studio
topic_type: reference
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Spokes, Flow integrations, Flows, subflows, and actions reference, Flows, subflows, and actions, Workflow Studio, Build workflows]
---

# Security Operations spoke

Provides Security Operations actions for flow designers to manage Security Incident Response flow templates.

## Security Incident Response flow templates

The Security Incident Response flow templates are created using [Workflow Studio](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/workflow-studio.md).

**Note:** Each of the flows is triggered when the **Category** in a security incident is set or changed.

|Template|Description|
|--------|-----------|
|Security Incident Confidential Data Exposure flow template|Perform a series of tasks designed to handle the exposure of sensitive data.|
|Security Incident Denial of Service flow template|Perform a series of tasks designed to handle Denial of Service \(DOS\) attacks.|
|Security Incident Lost Equipment flow template|Perform a series of tasks designed to handle lost equipment.|
|Security Incident Malicious Software flow template|Perform a series of tasks designed to handle malicious software on your network.|
|Security Incident Phishing flow template|Perform a series of tasks designed to handle spear phishing emails on your network.|
|Security Incident Policy Violation flow template|Perform a series of tasks designed to handle security policy violations.|
|Security Incident Reconnaissance flow template|Perform a series of tasks designed to handle reconnaissance on your network.|
|Security Incident Rogue Server or Service flow template|Perform a series of tasks designed to handle activity from rogue servers or services affecting your network.|
|Security Incident Spam flow template|Perform a series of tasks designed to handle email spam on your network.|
|Security Incident Unauthorized Access flow template|Perform a series of tasks designed to handle unauthorized access to your network.|
|Security Incident Web/BBS Defacement flow template|Perform a series of tasks designed to handle vandalism directed against one of your BBS or web sites.|

**Parent Topic:**[Spokes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/spokes.md)