Configuring Major Security Incident Management

Install and configure Major Security Incident Management application.

Important:

• To get quickly started with Major Security Incident Management configuration, you can refer to the Major Security Incident Management (MSIM) Quick Start Guide on the ServiceNow Store.

• After installing the Major Security Incident Management app, ensure that you import the update set in KB1289784 to load the partially pre-configured files.

Use this section to learn how to set up the necessary configurations required to work with Major Security Incident records by integrating with other external Microsoft applications to establish connections with ServiceNow instance.

• Configure File Explorer Component
  The File Explorer workspace component organizes and tracks the collection of artifacts (files) related to a major security incident. It is designed to support integration with any third-party file hosting provider such as Microsoft SharePoint in the Major Security Incident Management workspace.

• Configure Microsoft Teams
  Configure Major Security Incident Management with Microsoft Teams which helps communication over the chat to resolve Major Security Incident.

• Configure Slack chat connector for major security incidents
  Integrate and collaborate with Slack to resolve Major Security Incident to view and filter collaboration chat activities.

• Customize SI to MSI flows (optional)
  Copy and customize the SI to MSI promotion flows to control how File Explorer and chat channels are configured when a Security incident is promoted to a Major Security Incident.

Parent Topic:Major Security Incident Management