---
title: Category management in Security Incident Response
description: Configure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/category-management-sir.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Configure, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Category management in Security Incident Response

Configure security incident categories and subcategories for granular classification of incidents, which helps you accurately route security incidents.

-   **[Create a security incident category](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/create-category-sir.md)**  
Create a security incident category to use to classify security incidents in Security Incident Response Workspace.
-   **[Create a security incident subcategory](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/create-subcategory-sir.md)**  
Create subcategories for a category for a deeper classification of a security incident in Security Incident Response Workspace.

**Parent Topic:**[Configuring SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configuring-security-incident-response-workspace.md)

**Related topics**  


[Configuring ServiceNow Otto for Security Incident Response \(SIR\)]()

[Set up view of SIR Records]()

[Configure SI design time investigation]()

[SIR Workspace Related Records]()

[Define the new Risk Score Calculator Rules]()

[Configure Shift Handover]()

[Security Incident Response conference call integration]()

[Configure report templates in Security Incident Response]()

[On-Call scheduling in Security Incident Response]()

[View and update Security Incident Response system properties]()

[Create quick filters for Security Incidents and Response Tasks lists]()

[Timeline in Security Incident Response Workspace]()