---
title: SIR Workspace features
description: The Security Incident Response Workspace consists of the following key features.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/key-features.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Explore, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# SIR Workspace features

The Security Incident Response Workspace consists of the following key features.

-   Overview section
-   Upcoming section
-   Quick Links section
-   Shift Handover Records section
-   List view
-   Multi-tab interface that supports opening multiple security incidents
-   AI Search to find Security Incidents, Response Tasks, Observables, Security Requests, and Indicators of Compromise across the workspace. Filter results by State, Assigned to, Category, Severity, Finding, Type, Configuration Item, and Affected User. For more information about AI Search, see [AI Search](https://www.servicenow.com/docs/r/ai-search/ai-search).

\[Omitted image "key-features-section.png"\] Alt text: SIR workspace key features

**Parent Topic:**[Exploring SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/exploring-security-incident-response-workspace.md)

**Related topics**  


[SIR Workspace plugins]()

[SIR Workspace interface overview]()

[Upcoming section]()

[Quick links section]()

[Shift Handover Records section]()

[List view in SIR Workspace]()