---
title: Exploring SIR Workspace
description: Explore Security Incident Response Workspace to understand how the security analysts and managers perform their day-to-day operations with an improved user experience, do a complete incident investigation, and get an overview of the security incidents, response tasks and SLAs assigned to the security analyst and team.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/exploring-security-incident-response-workspace.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Exploring SIR Workspace

Explore Security Incident Response Workspace to understand how the security analysts and managers perform their day-to-day operations with an improved user experience, do a complete incident investigation, and get an overview of the security incidents, response tasks and SLAs assigned to the security analyst and team.

This section describes the following:

-   SIR Workspace plugins and required roles.
-   Key SIR Workspace features.

-   **[SIR Workspace plugins](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/components-installed-with-analyst-workspace.md)**  
The following are the required applications to work with Security Incident Response Workspace \(sn\_si\_aw\) plugin.
-   **[SIR Workspace features](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/key-features.md)**  
The Security Incident Response Workspace consists of the following key features.
-   **[SIR Workspace interface overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/overview.md)**  
The SIR Workspace Overview page consists of the Security Incidents and Response Tasks details that are under security analysts and their team.
-   **[Upcoming section](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/upcoming-section.md)**  
This section displays the upcoming tasks such as the security incidents and response tasks that are due as on the same day and next day.
-   **[Quick links section](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/quick-links.md)**  
Quick links work like bookmark links. You can add external URLs and quickly access them from within the workspace.
-   **[Shift Handover Records section](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/shift-handover-records-section.md)**  
The section displays the list of Shift Handover records in the Security Incident Response Workspace.
-   **[List view in SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/setting-up-list-view-in-analyst-workspace.md)**  
The list view consists of the security incidents, response tasks, phishing emails, and assessments.

**Parent Topic:**[Security Incident Response Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/sir-workspace-landing-page.md)