---
title: SIR Workspace interface overview
description: The SIR Workspace Overview page consists of the Security Incidents and Response Tasks details that are under security analysts and their team.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/overview.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Explore, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# SIR Workspace interface overview

The SIR Workspace Overview page consists of the Security Incidents and Response Tasks details that are under security analysts and their team.

There are various widgets present under each filter grouped by priority, category, state, and SLA, which are in the security analysts’ queues and security analysts team's queue.

When filters are applied on the widgets, the bottom half of the overview page is populated with the corresponding security incidents or response tasks presented as cards or list items. The analyst can toggle between the card view or the list view as desired.

For example, on the **Priority** widget if you want to select all the critical incidents or response tasks then select the **Critical** segment \(example screen shot below\) of the widget and those incidents or response task which are critical gets displayed in the list or card view.

\[Omitted image "critical-incidents.png"\] Alt text: Critical incidents

You can assign or reassign the security incidents or response tasks directly from this view by selecting the ellipse icon and select the **Assign** \(option in card view\) or directly the **Assign** button \(option in list view\) accordingly to assign an incident.

\[Omitted image "card-view-example.png"\] Alt text: Card view and Reassign

\[Omitted image "workspace-list-view.png"\] Alt text: workspace list view

Here is an example of the list view. The user can assign incidents from the list view as well.

\[Omitted image "assign-dialogue-box.png"\] Alt text: assign incidents

**Add** or modify the assignee details such as Assignment group and Assigned to, add worknotes, if required.

**Note:** You can assign one or more security incidents or response tasks to the assignment groups. The selected number is displayed on the **Assign** button.

The user can delete security incidents from this view. Select the **Delete** button to delete the security incident, the record will be deleted from the list view.

The user can export the list content as well. Select the **Export** button to export the list in the desired format.

**Parent Topic:**[Exploring SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/exploring-security-incident-response-workspace.md)

**Related topics**  


[SIR Workspace plugins]()

[SIR Workspace features]()

[Upcoming section]()

[Quick links section]()

[Shift Handover Records section]()

[List view in SIR Workspace]()