---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Prioritize remediation by fix

# Prioritize remediation by fix {#ariaid-title1}

* Release version: Australia
* 
* Updated July 29, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use the Fix data and Security Exposure Management dashboards to focus first on the fixes
that resolve the most findings and remove the most risk.

## Before you begin

Role required: `sn_vul_fix.read`, or a Vulnerability Response role that
contains it.  
Prerequisites:

* Fix Intelligence for SEM has identified fixes and rolled up their risk scores.

## About this task

Because one fix can resolve many findings across many assets, prioritizing by fix often
removes more risk per action than working finding by finding. Fix Intelligence for SEM adds widgets and rolled-up fix metrics that support this.
For general prioritization guidance in USEM, see the linked topics; this task covers the
fix-specific view.

## Procedure

1. Open the Remediation overview and select the Fix Intelligence tab.  
   The tab shows the following:
   * Findings that have a fix identified and the ones that don't
   * Number of unique fixes
   * breakdowns of findings that have a fix by Risk rating and by Remediation category
   * Top 5 fixes to reduce critical risk (sorted by rolled-up risk score)
   * Top 5 common fixes sorted by active findings.
   {#prioritize-remediation-by-fix__ul_cmj_jp1_ckc}
2. Use Top 5 fixes to reduce critical risk to find the fixes that remove the most risk, and Top 5 common fixes to find the fixes that resolve the most or greatest number of findings.  
   Select View All on either list to see all fixes sorted accordingly.
3. In the Fix list, sort by Risk score or filter by Risk rating to surface the fixes that remove the most risk.  
   For more information on roll-up calculators, see [Vulnerability Response Rollup Calculators](https://servicenow-prod.fluidtopics.net/2ic64f0TluYF727ZR7v38w "After your initial assessment of risk calculators in the Setup Assistant, use the vulnerability rollup calculators to configure how the cumulative risk score is computed for remediation tasks and imported vulnerabilities.").
4. Open a candidate fix and review its findings and assets to confirm scope and impact.
5. **Optional:** Use the Fix Intelligence section on a configurable Findings View dashboard to see fixes for a specific slice of findings, such as approaching-target or critical-risk findings.  
   The section shows how many findings in that dashboard have a fix identified, the unique fixes, the top fixes, and the top remediation categories.
6. Plan remediation for the selected fixes, optionally grouping their findings into a remediation task.  
   See [Group findings by fix](https://servicenow-prod.fluidtopics.net/TWcGxOmjtD2Z_xwoW42d8Q "Use a remediation task rule to group the findings that share a fix, so your team can remediate them together as a single unit of work.").
{#prioritize-remediation-by-fix__steps_prio}

## Result

You have a prioritized set of fixes to remediate, ordered by the findings and risk they
address.
**Related concepts**   

* [Remediation view](https://servicenow-prod.fluidtopics.net/Qlwa1HPh_XGnJf_NIu9eVQ "The Remediation view in the Security Exposure Management workspace provides remediation owners and vulnerability managers with a consolidated view of remediation tasks, findings (vulnerable items and configuration test results), and assets (configuration items) that are associated with exposure findings.")
* [Prioritizing vulnerabilities and other findings using roll-up calculators](https://servicenow-prod.fluidtopics.net/1Rv4OZdtFTWBfBj1oUAxwg "After assessing risk calculators, use the roll-up calculators to configure how the cumulative risk scores are computed for remediation tasks and other higher entities.")