---
title: Edit a report
description: Analysts can modify an unpublished report in Security Incident Response and share it via email.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/edit-report-sir.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Reports in Security Incident Response, Working with Security Incident Records, Use, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Edit a report

Analysts can modify an unpublished report in Security Incident Response and share it via email.

## Before you begin

Role required: sn\_si.analyst

## Procedure

1.  Navigate to **Workspaces** > **Security Incident Response Workspace**.

2.  Open a security incident.

3.  Select **Reports**.

    The **Report** page displays a list of all the reports created for the selected incident.

4.  Open the report to update.

    The report opens in edit mode with the incident data as configured in the template.

5.  Edit the report as required.

6.  Select **Preview** to view a preview of the report.

7.  Select **Save Content** to save the changes.

8.  Select the edit report details icon to update the report name and description.

9.  Select **Publish** to publish the report.

10. Select the share report in email icon \[Omitted image "share-report-icon-sir.png"\] Alt text:.

    1.  Enter the recipient’s emails in the **To** and **Cc/Bcc** fields.

    2.  Update the email **Subject and Email Body**.

    3.  Select **Send** to share the report over email.


**Parent Topic:**[Reports in Security Incident Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/report-templates-sir.md)