---
title: Link to Major Security Incident
description: Link a security incident to a major security incident as child security incident\(s\).
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/link-to-major-security-incident.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Working with MSI Records, Use, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Link to Major Security Incident

Link a security incident to a major security incident as child security incident\(s\).

## Before you begin

Role required: sn\_si.analyst.

## Procedure

1.  Navigate to **Workspaces** > **Security Incident Response Workspace**.

2.  Open any security incident.

3.  Click **Link to Major Security Incident**.

    \[Omitted image "link-si-to-msi.png"\] Alt text: Link incident

4.  Select the incident\(s\) to link to a major security incident.

5.  Click **Link**.

6.  The incident record is linked as a child incident of the major security incident.

    After the incident is linked as a child incident to a major security incident, **Major Security Incident** tag is applied and displayed on the form banner.


**Parent Topic:**[Working with MSI Records](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/working-with-msi-records.md)