--- title: Manage post incident activities description: Based on the requirements of your business, a review of the origins and handling of security incidents is often needed. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/c\_PostIncidentReview.html release: australia product: Security Incident Response classification: security-incident-response topic_type: concept last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Managing security incidents and inbound requests, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Manage post incident activities Based on the requirements of your business, a review of the origins and handling of security incidents is often needed. The Post Incident Review functionality in ServiceNow provides many tools for automating, tracking, auditing, and simplifying this process. This section describes the following: - [Assign post incident review roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/assign-pir-roles.md) - [Configure an assessment trigger condition](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/post-incident-review-setup.md) - [Perform a questionnaire-based post incident review](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/t_PerformPostIncidentReview.md) - [Create post incident review assignment rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/create-pir-assignment-rules.md) - [Post incident review report](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/new-post-incident-review-report.md)