---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Assign a priority and exposure level to the vulnerability assessment record

# Assign a priority and exposure level to the vulnerability assessment record {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Manually assign priority and exposure level to the vulnerability assessment record.

## Before you begin

Role required: sn_vul_analyst.vul_event_manager

## Procedure

1. Navigate to WorkspacesVulnerability Assessment workspace.
2. Select a vulnerability assessment record.
3. Navigate to Risk Attributes in the Details tab.
4. Select a Priority from the list of options.
5. Select an Exposure Level from the list of options.
6. Select Save.

## Result

When you update the priority of a vulnerability assessment (VA), the system also updates the priority of all associated vulnerable items (VITs) and application vulnerable items (AVITs).

If a VIT or AVIT is linked to multiple VA records, the system assigns the highest severity (lowest priority number) from all linked assessments.

## Example

If a VIT is associated with three VA records with priorities 2, 3, and 4, the system sets the VIT priority to 2 (High).  
Note:  
This priority roll-down applies only to VITs and AVITs created through SAM NVD assessments or the Vulnerability Assessment Workspace (Source = ServiceNow VR). Vulnerable items imported from third-party scanners retain the priority determined by the scanner integration's severity mapping.

*[\>]: and then