--- title: Security Incident Response Workspace description: The ServiceNow Security Incident Response Workspace is a reimagined interface that provides a next-gen user experience for the security analysts and SOC managers. The security analysts can use this to manage the life cycle of security incidents from an initial analysis to containment, eradication, and recovery. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/sir-workspace-landing-page.html release: australia product: Security Incident Response classification: security-incident-response topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Security Incident Response, Enterprise security case management applications, Security Operations] --- # Security Incident Response Workspace The ServiceNow® Security Incident Response Workspace is a reimagined interface that provides a next-gen user experience for the security analysts and SOC managers. The security analysts can use this to manage the life cycle of security incidents from an initial analysis to containment, eradication, and recovery. ## Get started with SIR Workspace Select a tile to get started. ## Request apps on Store Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html). **Important:** - Installing the Security Incident Response 13.4.5 version or later from the ServiceNow Store will automatically install the Security Incident Response Workspace \(sn\_si\_aw\) 1.5.1 version or later by default. For more information on the dependent applications, refer to the [SIR Workspace plugins](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/components-installed-with-analyst-workspace.md) section. - Please note that the Security Incident Response Workspace versions 1.5.1 and above can only be installed/upgraded through an installation/upgradation of Security Incident Response and can’t be installed independently. ## More resources Visit the [Security Incident Response forum on the ServiceNow Community.](https://www.servicenow.com/community/secops-articles/tkb-p/security-operations-kb/label-name/security%20incident%20response?labels=security%20incident%20response)