---
title: Content pack for Security Incident Response
description: Using the Process Mining content pack for Security Incident Response, you can analyze inefficiencies through the life cycle of your security incidents. You can use this information to optimize the processes for your security incidents.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/now-intelligence/process-mining/sir-proc-min-content-pack.html
release: australia
product: Process Mining
classification: process-mining
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Activate content packs, Activate, Process Mining, Platform Analytics]
---

# Content pack for Security Incident Response

Using the Process Mining content pack for Security Incident Response, you can analyze inefficiencies through the life cycle of your security incidents. You can use this information to optimize the processes for your security incidents.

For more information about enabling the Process Mining Content Pack for SIR, see [Activate content packs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/now-intelligence/process-mining/activate-po-content-pack.md).

## End user and roles

If you have the required roles, you can use the Analyst workbench to access the visualized security incident workflow data, and tools for analyzing the data related to security incidents. For more information, see [Analyst workbench page](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/now-intelligence/process-mining/analyst-workbench-dashboard.md).

-   Process Mining role: sn\_process\_mining\_analyst
-   Security Incident Response role: sn\_si\_read

**Parent Topic:**[Activate content packs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/now-intelligence/process-mining/activate-po-content-pack.md)