In order to see the Actions in Flow Designer for Security Incident, what plugin must be activated?

The Security Operations Spoke is the official ServiceNow plugin that provides a collection of actions for use within Flow Designer. These actions are specifically designed to automate tasks across the Security Operations suite, including creating, updating, and managing security incidents, as well as interacting with observables and other related records. Activating this spoke makes the "Security Operations" category and its associated actions available in the Flow Designer interface for building automated security response workflows.

A. This plugin provides dashboards and key performance indicators for reporting, not automation actions for Flow Designer.
B. "Security Spoke" is a generic term and not the name of an official ServiceNow plugin for this purpose.
D. A dedicated "Security Incident Spoke" does not exist; its actions are consolidated within the Security Operations Spoke.

1. ServiceNow Product Documentation: "Security Operations Spoke". The documentation explicitly states, "The Security Operations Spoke provides actions to automate Security Incident Response, Vulnerability Response, and Threat Intelligence tasks." It lists actions such as Create Security Incident, Update Security Incident, and Add Observable to Security Incident. (ServiceNow Product Documentation, Washington DC Release, Document ID: flow-designer-sn-sec-cmn-spoke).

2. ServiceNow Store: The official listing for the "Security Operations Spoke" describes its purpose: "Provides a set of actions for Security Operations applications (Security Incident Response, Vulnerability Response, Threat Intelligence) to use in Flow Designer." (ServiceNow Store, App ID: snseccmnspoke).