---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# How Fix Intelligence for SEM works

# How Fix Intelligence for Security Exposure Management works {#ariaid-title1}

* Release version: Australia
* 
* Updated August 3, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Fix Intelligence for Security Exposure Management enriches your host findings with normalized fix
information and stores each unique fix as a Fix record. The feature links every fix to the
findings it resolves and rolls up a risk score per fix. Your team can remediate by fix instead
of one finding at a time.

Fix Intelligence for Security Exposure Management connects Armis Centrix™ for Vulnerability Prioritization and Remediation (ViPR) to Unified Security Exposure Management. Instead of surfacing one vulnerability at a time, it consolidates the remediation actions that resolve those vulnerabilities into de-duplicated Fix records. It maps each fix to the findings and assets it affects and prioritizes fixes by an aggregate risk score.

## How fixes are identified {#fix-intel-data-flow__section_how-fixes-are-identified}

Fix Intelligence for SEM relies on the normalization and deduplication capability
of Armis Centrix™ for ViPR to identify a normalized fix for each vulnerability
detection. The data moves through the following stages:

1. Detections are ingested: Your vulnerability integrations bring detections from your scanners into USEM as findings.
2. Detections are consumed for normalization: Armis Centrix™ for ViPR consumes the scanner detection data from your instance through the Integration Sync API.
3. Fixes are identified: Armis Centrix™ for ViPR normalizes and de-duplicates the detections and identifies a fix for each one.
4. Fixes are stored and linked: USEM retrieves the identified fixes and stores them as Fix records, linked to the findings each fix resolves.
5. Risk is rolled up: Each fix receives a risk score, a findings count, and a distinct-assets count, calculated from the active findings that share the fix. For more information on roll-up calculators, see [Vulnerability Response Rollup Calculators](https://servicenow-prod.fluidtopics.net/2ic64f0TluYF727ZR7v38w "After your initial assessment of risk calculators in the Setup Assistant, use the vulnerability rollup calculators to configure how the cumulative risk score is computed for remediation tasks and imported vulnerabilities.").

{#fix-intel-data-flow__ol_fix_intel_stages}

In this release, fixes are identified for host vulnerabilities (host vulnerable items) from
the Qualys, Rapid7, Tenable.io, Wiz, and Microsoft Defender Vulnerability Management
integrations.

## Where fixes appear {#fix-intel-data-flow__section_where-fixes-appear}

After fixes are identified, they are available as a list and form in Unified Security Exposure Management Workspace, and as widgets on the Findings View and the Remediation View --- for example,
Findings with fix identified and Top fixes by finding count. Each finding also shows a read-only Fix reference
linking to the fix that resolves it. To learn how to read and act on this data, see [View fixes in USEM Workspace](https://servicenow-prod.fluidtopics.net/zWl0MMQ69UfnDD4z_KblOw "Open the Fix list and form in Unified Security Exposure Management Workspace to review the fixes that Fix Intelligence for SEM has identified, and see the findings and assets each one resolves.") and [Prioritize remediation by fix](https://servicenow-prod.fluidtopics.net/tMbHQP0cW~1ehil_Cu5XCQ "Use the Fix data and Security Exposure Management dashboards to focus first on the fixes that resolve the most findings and remove the most risk.").
**Related concepts**   

* [Exploring Fix Intelligence for Security Exposure Management](https://servicenow-prod.fluidtopics.net/e6TY9snDRc34hmqkRnR8fA "Fix Intelligence for Security Exposure Management enriches USEM with a de-duplicated catalog of remediation actions, each linked to the findings and assets it resolves and scored by the risk it removes.")  
**Related reference**   

* [Fix Intelligence for Security Exposure Management](https://servicenow-prod.fluidtopics.net/spSTSACGMs2oIdsifUUX3Q "Fix Intelligence for Security Exposure Management brings fix and remediation intelligence from Armis Centrix™ for Vulnerability Prioritization and Remediation (ViPR) into Unified Security Exposure Management (USEM), so your security team can remediate vulnerabilities by fix instead of one finding at a time.")