---
title: Configure SI design time investigation
description: Use this section to configure security incident design time investigation page to add multiple entry points and its associated records within the Security Incident Response Workspace.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/configure-investigation-canvas-records.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 3
breadcrumb: [Configure, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Configure SI design time investigation

Use this section to configure security incident design time investigation page to add multiple entry points and its associated records within the Security Incident Response Workspace.

Role required: sn\_si.admin.

The following details the steps involved in configuring the investigation page on the Security Incident Response Workspace.

-   [Creating View for associated info tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/creating-view-for-associated-info-tables.md)
-   [Adding an entry point list](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/add-an-entry-point-list.md)
-   [Mapping View of the Associate Info to the entry point list](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/map-view-to-the-entry-point-list.md)
-   [Configure each associated list from the view to handle run time data rendering](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configure-associated-list.md)

-   **[Creating View for associated info tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/creating-view-for-associated-info-tables.md)**  
The investigation screen leverages the related list views created on security incident to configure associated lists.
-   **[Adding an entry point list](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/add-an-entry-point-list.md)**  
Configure the new entry point list to add it to the investigation page.
-   **[Mapping View of the Associate Info to the entry point list](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/map-view-to-the-entry-point-list.md)**  
Map the associated info view to the newly added entry point list using the Map Associated Info View action.
-   **[Configure each associated list from the view to handle run time data rendering](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configure-associated-list.md)**  
Configure each associated list from the view to handle run time data rendering.

**Parent Topic:**[Configuring SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configuring-security-incident-response-workspace.md)

**Related topics**  


[Configuring ServiceNow Otto for Security Incident Response \(SIR\)]()

[Set up view of SIR Records]()

[SIR Workspace Related Records]()

[Define the new Risk Score Calculator Rules]()

[Configure Shift Handover]()

[Security Incident Response conference call integration]()

[Configure report templates in Security Incident Response]()

[On-Call scheduling in Security Incident Response]()

[Category management in Security Incident Response]()

[View and update Security Incident Response system properties]()

[Create quick filters for Security Incidents and Response Tasks lists]()

[Timeline in Security Incident Response Workspace]()

[Explore Investigation Canvas](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/explore-investigation-in-sir-workspace.md)