<h2>Working on major incident management</h2><br/><div style="overflow-x:auto"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta content="text/html; charset=UTF-8" /><meta name="copyright" content="(C) Copyright 2025" /><meta name="DC.rights.owner" content="(C) Copyright 2025" /><meta name="generator" content="DITA-OT" /><meta name="DC.type" content="concept" /><meta name="DC.title" content="Working on major incident management" /><meta name="abstract" content="The section covers topics that help you with a variety of technical concepts related to major incident management such as the different ways to create a major incident, ways to reject a major incident candidate, demote a major incident, or close a major incident." /><meta name="description" content="The section covers topics that help you with a variety of technical concepts related to major incident management such as the different ways to create a major incident, ways to reject a major incident candidate, demote a major incident, or close a major incident." /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/concept/major-incident-management.html" /><meta name="DC.relation" scheme="URI" content="../../../product/it-service-management/reference/r_ITServiceManagement.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/concept/c_IncidentManagement.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/create-major-incident-candidate.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/create-a-major-incident.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/concept/major-incident-assignment.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/accept-reject-major-incident-candidate.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/asso-multi-inci-with-major-inci.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/reject-candi-using-actions-menu.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/demote-major-incident.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/close-major-incident.html" /><meta name="DC.relation" scheme="URI" content="../../../product/incident-management/task/view-major-info.html" /><meta name="DC.creator" content="ServiceNow" /><meta name="DC.date.created" content="2023-08-03" /><meta name="DC.date.modified" content="2024-02-01" /><meta name="DC.format" content="XHTML" /><meta name="DC.identifier" content="work-on-mim" /><link rel="stylesheet" type="text/css" href="../../../CSS/commonltr.css" /><title>Working on major incident management</title></head><body id="work-on-mim"> <div class="breadcrumb"><a class="link" href="../../../product/it-service-management/reference/r_ITServiceManagement.html" title="The IT Service Management (ITSM) solution provides scalable workflows to manage and deliver IT services to your users all through a single cloud-based platform.">IT Service Management</a> > <a class="link" href="../../../product/incident-management/concept/c_IncidentManagement.html" title="Incident Management restores normal service operation while minimizing impact to business operations and maintaining quality.">Incident Management</a> > </div> <h1 class="title topictitle1" id="ariaid-title1">Working on major incident management</h1> <p class="shortdesc">The section covers topics that help you with a variety of technical concepts related to major incident management such as the different ways to create a major incident, ways to reject a major incident candidate, demote a major incident, or close a major incident.</p> <div class="related-links"> <ul class="ullinks"><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/create-major-incident-candidate.html">Create a major incident candidate</a></strong><br /> You can create a major incident candidate in multiple ways. After a major incident candidate is created, the major incident manager evaluates the candidate and decides whether the candidate should be promoted to a major incident.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/create-a-major-incident.html">Create a major incident</a></strong><br /> Create a major incident directly or review the candidates and promote the candidates to major incidents.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/concept/major-incident-assignment.html">Major incident assignment</a></strong><br /> A major incident is assigned to a group automatically at the time of proposal and promotion based on the value of the property <span class="ph uicontrol">Major Incident Management Group (sys_id) to whom the Major Incident should be re-assigned on promotion to 'Major Incident'</span> (<span class="keyword parmname">sn_major_inc_mgmt.major_incident_management_group</span>). The assigned group works on the major incident and resolves it.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/accept-reject-major-incident-candidate.html">Accept or reject a major incident candidate</a></strong><br /> When an incident is proposed as a major incident candidate, a major incident manager can accept or reject the candidate. The manager accepts a candidate as a major incident if the incident requires accelerated resolution.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/asso-multi-inci-with-major-inci.html">Associate multiple incidents with a major incident</a></strong><br /> You can associate one or more incidents with a major incident using the Actions menu.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/reject-candi-using-actions-menu.html">Reject multiple major incident candidates using the Actions menu</a></strong><br /> You can reject one or more major incident candidates using the Actions menu. If you decide that the candidates do not qualify to be major incidents, then you can reject multiple candidates at once and provide the rejection reason.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/demote-major-incident.html">Demote a major incident</a></strong><br /> When an incident is incorrectly evaluated to be a major incident, you can demote the major incident even after it is accepted so that the incident can be handled as a regular incident.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/close-major-incident.html">Close a major incident</a></strong><br /> You can close a major incident manually after validating the resolution and when the major incident is in the <span class="ph uicontrol">Resolved</span> state.</li><li class="link ulchildlink"><strong><a href="../../../product/incident-management/task/view-major-info.html">View major incident information on the Incident form</a></strong><br /> When an incident enters the major incident life cycle, the <span class="ph uicontrol">Major Incident</span> and the <span class="ph uicontrol">Post Incident Report</span> tab appears on the incident form.</li></ul> <div class="familylinks"> <div class="parentlink"><strong>Parent Topic:</strong> <a class="link" href="../../../product/incident-management/concept/major-incident-management.html" title="A major incident (MI) is an incident that results in significant disruption to the business. A major incident demands a response beyond the routine incident management process. Major incidents have a separate procedure with shorter timescales and higher priority, so that there is a faster resolution process for incidents with high business impact.">Managing major incidents</a></div> </div> </div></body></html></div>