Vulnerability Response workspaces overview
Summarize
Summary of Vulnerability Response Workspaces Overview
The Vulnerability Response workspaces in ServiceNow are designed to help organizations manage vulnerabilities effectively. They encompass the Vulnerability Manager, IT Remediation, and Vulnerability Assessment Workspaces, allowing users to identify, prioritize, and remediate vulnerabilities and misconfigurations through a unified platform. These workspaces integrate data from various vulnerability libraries and third-party scanners to streamline the vulnerability management process.
Show less
Key Features
- Bulk Edit: Update multiple records simultaneously in the Vulnerability Manager Workspace.
- Dashboards: Access various dashboards including Vulnerability Management, Vulnerability Approvals, and Health dashboards in the Next Experience UI.
- Manual Task Creation: Create and manage Remediation Tasks (VUL, AVUL, CVUL, CRG) directly within the relevant workspaces.
- Task Splitting: Split Remediation Tasks to better manage and assign them.
- Policy Exceptions: Request exceptions for vulnerable items and remediation tasks in both workspaces.
- Vulnerability Crisis Management: Track and manage critical vulnerability events effectively.
- Compensating Controls Library: Add and manage compensating controls for vulnerabilities.
- Agile Issue Creation: Create agile and Jira issues for application and container vulnerabilities.
Key Outcomes
By utilizing the Vulnerability Response workspaces, customers can enhance their security posture by efficiently managing vulnerabilities and remediating them before they can be exploited. They can expect improved visibility into vulnerability statuses, streamlined communication between vulnerability managers and IT specialists, and a proactive approach to mitigating security risks, particularly during critical events.
The Vulnerability Manager and IT Remediation Workspaces support Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance.
The Vulnerability Manager, IT Remediation, and Vulnerability Assessment Workspaces
- Vulnerability Manager Workspace
- As a Vulnerability Manager, protect your company's assets from malware and malicious attacks. From a single work area in your ServiceNow AI Platform®, with the Vulnerability Response application, along with current vulnerability data imported into your instance from vulnerability libraries and third-party scanner data applications, identify critical vulnerabilities and misconfigurations, prioritize them, and send lists of remediation tasks over to IT for their specialists to act on.
- IT Remediation Workspace
-
As an IT specialist, use lists, or remediation tasks (RT) sent over by vulnerability managers to monitor and resolve critical vulnerabilities assigned to you or your groups. Fix groups of vulnerable items with patches, solutions, vulnerability rescans, change requests, exceptions, and other tools to remediate vulnerable items and test results all from one location.
- Vulnerability Assessment Workspace
- As a Vulnerability event manager, perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event.
Key features
- Use the Bulk Edit feature in the Vulnerability Manager Workspace to update multiple records simultaneously. For more information, see Using bulk edit in the Vulnerability Manager Workspace.
- View the Vulnerability Management (PA), Vulnerability Approvals, CISO, Container Vulnerability Management Overview, Application Vulnerability Management Dashboard, Unified Vulnerability Response, and Health dashboards in the Next Experience UI on the Dashboards page of the Vulnerability Manager Workspace. For more information, see Dashboards page in the Vulnerability Manager Workspace.
- View the Vulnerability Remediation dashboard in the Next Experience UI on the Dashboards page of the IT Remediation Workspace. For more information, see Dashboards page in the IT Remediation Workspace.
- Create the Remediation Tasks (VUL, AVUL, CVUL, or CRG) manually in the Vulnerability Manager Workspace and IT Remediation Workspace. For more information, see Create a remediation task manually in the Vulnerability Manager Workspace and Create a remediation task manually in the IT Remediation Workspace.
- Split the Remediation Tasks (VUL, AVUL, CVUL, and CRG) in the Vulnerability Manager Workspace and IT Remediation Workspace. For more information, see Request exceptions for remediation tasks and records in the Vulnerability Manager Workspace and Split a remediation task in the IT Remediation Workspace respectively.
- Request the policy exceptions for vulnerable items (VITs, AVITs, and CVITs), and Remediation Tasks (VUL, AVUL, CVUL, and CRG) in the Vulnerability Manager and IT Remediation Workspaces. For more information, see Request exceptions for remediation tasks and records in the Vulnerability Manager Workspace and Request an exception using GRC: Policy and Compliance Management in the IT Remediation Workspace respectively.
- Create and track critical vulnerability events through the Vulnerability Crisis Management (VCM). For more information, see Explore the Vulnerability Assessment Workspace.
- Add compensating controls to the Compensating controls library in the Vulnerability Manager Workspace. For more information, see Add a compensating control to the library.
- Request risk reduction for a host vulnerable item and remediation task from the IT Remediation workspace. For more information, see Request risk reduction for a vulnerable item or remediation task.
- Create an agile issue and a Jira issue for application and container vulnerable items from the Vulnerability Manager Workspace. For more information, see Create agile issue manually using form action and Create agile issue manually using list action.
For more information about version compatibility with the family releases, refer to the KB0856498 Vulnerability Response Compatibility Matrix and Release Schema Changes article in the HI Knowledge Base.