---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Request a false positive for a vulnerable item or remediate task

# Request a false positive for a vulnerable item or remediate task {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 min. de leitura

Indicate a false positive request for host vulnerable item (VIT), application vulnerable item (AVIT), container vulnerable item (CVIT), or remediation task (VUL, AVUL, CVUL or CRG) in the IT Remediation Workspace. A false positive is a condition where a scanner incorrectly reports that a vulnerability exists in the system due to situations such as an incorrect classification, improper logic, or an algorithm in the
scanner.

## Antes de Iniciar

Role required:

* sn_vul.remediation_owner for host vulnerable items (VITs)
* sn_vul.app_security_champion for application vulnerable items (AVITs)
* sn_vul_container.remediation_owner for container vulnerable items (CVITs)
* sn_vulc.remediation_owner for configuration test results (CTRs)

## Por Que e Quando Desempenhar Esta Tarefa

For information on how to request a false positive for a set of test results, see [Request a false positive for a set of test results](https://servicenow-prod.fluidtopics.net/ZQ3KtSjzVmBErGmDkWwaUA "Raise a false positive request for a set of test results within a remediation task in the IT Remediation Workspace.").

## Procedimento

1. Navigate to WorkspacesIT Remediation Workspace.
2. Select List icon (![List icon]()).
3. Select the remediation task (VUL, AVUL, CVUL or CRG) or vulnerable item (VIT, AVIT, or CVIT).
4. Select Mark as False Positive.
5. Enter information about the request.
6. Select Request Approval.
7. Provide additional information about your request to the approver and select Submit.  
   Nota:  
   The Take Questionnaire modal appears only when the Enable questionnaire to mark false positive check box is selected in the Exception Management Configuration form. For more information, see [Configure Exception Management for Vulnerability Response](https://servicenow-prod.fluidtopics.net/w9AOiXrDB10RepG6fkbRHw "When your organization can't comply with a published vulnerability management or security policy, standard, or guideline, you can request an exception. Exception management entails requesting, reviewing, approving, or rejecting exceptions to a vulnerable item (VI) or remediation task (RT) that cannot be remediated according to the policy."),[Configure Exception Management for Application Vulnerability Response](https://servicenow-prod.fluidtopics.net/wBcohzL0IDFja7iG2dhuIA "Limit the duration of an exception requested and add a questionnaire to the exception or false positive request using the module. By default, an exception is requested using the ServiceNow Application Vulnerability Response module. You can also request an exception using the GRC: Policy and Compliance Management integration."), [Configure Exception Management for Container Vulnerability Response](https://servicenow-prod.fluidtopics.net/7KBzLUZ2hcVjFtPW2TahDA "Limit the duration of an exception requested and add a questionnaire to the exception or false positive request using the Container Vulnerability Response module. By default, an exception is requested using the ServiceNow Container Vulnerability Response module. You can also request an exception using the GRC: Policy and Compliance Management integration."), and [Configure Exception Management for Configuration Compliance](https://servicenow-prod.fluidtopics.net/RHGGpq6W~uQsGx27yRBDAA "Limit the duration of an exception requested and add a questionnaire to the exception using the Configuration Compliance module. By default, an exception is requested using the ServiceNow Vulnerability Response module. You can also request an exception using the GRC: Policy and Compliance Management integration.").
{#vr-ws-mark-fp__steps_jfm_ct1_hwb}

## Resultado

The state of the vulnerable item (VIT, AVIT, or CVIT) or remediation task (VUL, AVUL, or CVUL) transitions to In Review.

Your request is submitted for approval and the approver receives an email notification about your request.

You will receive an email notification upon approval or rejection of your request.

## O que Fazer Depois

In the IT Remediation Workspace, on the List page, navigate to Exception RequestsMy requests and open the corresponding state change approval record (VCA#) and check the status of your request in the Approval state column:{#vr-ws-mark-fp__table_abm_tqr_gbc__entry__3}

| Approval state | Record (VIT, AVIT, or CVIT) | Remediation task (VUL, AVUL, CVUL, or CRG) |
|-|-|-|
| Approved | The State of the record transitions to Closed with Reason as False positive. | The State of the remediation task transitions to Closed with Reason as False positive. The state is rolled down to the records in the remediation task accordingly. Navigate to the Details tab of a Remediation task and set the expiry date for false positive in the Until field if required. The remediation task reverts to the Open state after the specified date and the state is rolled down to the test results. |
| Rejected | The state of the record does not change. | The state of the remediation task and its records reverts to previous state. |
[ ]

{#vr-ws-mark-fp__table_abm_tqr_gbc}

In the Activity stream of a record or remediation task, you can view the entire workflow of the false positive request.
**Conceitos relacionados**   

* [False Positive overview](https://servicenow-prod.fluidtopics.net/s6eHU7uyWfH9a5gQECwuWQ "A false positive is a condition wherein the scanner reports that a vulnerability exists in the system, but in reality there is no vulnerability. There can be multiple reasons like incorrect classification, improper logic or algorithm in the scanner. The remediation owner can mark vulnerable items (VIs) or remediation tasks (RTs) as false positives.")