--- title: Preview the mapped values in the security incident description: After you complete the mapping step, preview the values that you mapped in a SIR security incident. This preview step permits you to verify that you have mapped all the ticket fields that you want displayed on the security incident. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/secureworks-ctp-create-profile-preview.html release: australia product: Security Incident Response classification: security-incident-response topic_type: task last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Create a profile, Secureworks CTP Ticket Ingestion Integration, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Preview the mapped values in the security incident After you complete the mapping step, preview the values that you mapped in a SIR security incident. This preview step permits you to verify that you have mapped all the ticket fields that you want displayed on the security incident. ## Before you begin Role required: sn\_si.admin ## About this task Preview a security incident and edit the mapping again as required to fix fields with errors or to populate any missing data. If the preview is not successfully completed, you cannot proceed to the scheduling step. Previews of SIR security incidents are not saved as actual incidents in the Security Incident Response product. ## Procedure 1. If the security incident preview is not displayed, select **Preview** in the progress bar. The tickets are displayed as tabs. 2. Select a tab to preview the security incident. This view is a read-only view, and a record of this security incident is not saved. 3. Review the field mapping of the ticket values on the security incident. 4. To resolve this error, select **Mapping** in the progress bar. 5. Edit the mapping to fix incorrect values or populate any missing data. 6. Preview the mapping again and continue to fix any errors that are described in error messages. ## What to do next If no error messages are displayed, and you are satisfied with the field mapping on the security incident. Define the schedule.