--- sourceDocument: Australia Security Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # Vulnerability Response workspaces overview # Vulnerability Response workspaces overview {#ariaid-title1} * Release version: Australia * * Updated March 12, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Vulnerability Response Workspaces Overview The Vulnerability Response workspaces in ServiceNow are designed to help organizations manage vulnerabilities effectively. They encompass the Vulnerability Manager, IT Remediation, and Vulnerability Assessment Workspaces, allowing users to identify, prioritize, and remediate vulnerabilities and misconfigurations through a unified platform. These workspaces integrate data from various vulnerability libraries and third-party scanners to streamline the vulnerability management process. Show full answer Show less ## Key Features * **Bulk Edit:** Update multiple records simultaneously in the Vulnerability Manager Workspace. * **Dashboards:** Access various dashboards including Vulnerability Management, Vulnerability Approvals, and Health dashboards in the Next Experience UI. * **Manual Task Creation:** Create and manage Remediation Tasks (VUL, AVUL, CVUL, CRG) directly within the relevant workspaces. * **Task Splitting:** Split Remediation Tasks to better manage and assign them. * **Policy Exceptions:** Request exceptions for vulnerable items and remediation tasks in both workspaces. * **Vulnerability Crisis Management:** Track and manage critical vulnerability events effectively. * **Compensating Controls Library:** Add and manage compensating controls for vulnerabilities. * **Agile Issue Creation:** Create agile and Jira issues for application and container vulnerabilities. ## Key Outcomes By utilizing the Vulnerability Response workspaces, customers can enhance their security posture by efficiently managing vulnerabilities and remediating them before they can be exploited. They can expect improved visibility into vulnerability statuses, streamlined communication between vulnerability managers and IT specialists, and a proactive approach to mitigating security risks, particularly during critical events. The Vulnerability Manager and IT Remediation Workspaces support Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance. ## The Vulnerability Manager, IT Remediation, and Vulnerability Assessment Workspaces {#vulnerability-response-workspaces-overview__section_d4b_x1j_dtb} [Vulnerability Manager Workspace](https://servicenow-prod.fluidtopics.net/LLBmw_a5Cu0nzxorsbszKQ "The Vulnerability Manager Workspace enables vulnerability managers and analysts to monitor the vulnerabilities and misconfigurations that they care the most about and decide strategically which vulnerabilities they send to IT teams to fix.") : As a Vulnerability Manager, protect your company's assets from malware and malicious attacks. From a single work area in your ServiceNow AI Platform®, with the Vulnerability Response application, along with current vulnerability data imported into your instance from vulnerability libraries and third-party scanner data applications, identify critical vulnerabilities and misconfigurations, prioritize them, and send lists of remediation tasks over to IT for their specialists to act on. [IT Remediation Workspace](https://servicenow-prod.fluidtopics.net/lZssjYy9DJr4UOxHnXwXJQ "IT teams can save time resolving IT-related vulnerabilities by easily creating change requests, rescanning vulnerable items, and submitting exception requests from the IT Remediation Workspace.") : As an IT specialist, use lists, or remediation tasks (RT) sent over by vulnerability managers to monitor and resolve critical vulnerabilities assigned to you or your groups. Fix groups of vulnerable items with patches, solutions, vulnerability rescans, change requests, exceptions, and other tools to remediate vulnerable items and test results all from one location. [Vulnerability Assessment Workspace](https://servicenow-prod.fluidtopics.net/u8sK2NCOophqngLNqHw_8w "The Vulnerability Assessment Workspace is designed for the Vulnerability event manager to perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event.") : As a Vulnerability event manager, perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event. ## Key features {#vulnerability-response-workspaces-overview__section_kp5_prr_5sb} The Vulnerability Response workspaces include the following features and enhancements. * Use the Bulk Edit feature in the Vulnerability Manager Workspace to update multiple records simultaneously. For more information, see [Using bulk edit in the Vulnerability Manager Workspace](https://servicenow-prod.fluidtopics.net/38Tbb~2Ur6vyt2vTq9QVtA "In the Vulnerability Manager Workspace, you can update the state of the records, request exceptions and false positives, and assign records to an assignment group multiple vulnerable items (VITs, AVITs, or CVITs) simultaneously using the bulk edit feature."). * View the Vulnerability Management (PA), Vulnerability Approvals, CISO, Container Vulnerability Management Overview, Application Vulnerability Management Dashboard, Unified Vulnerability Response, and Health dashboards in the Next Experience UI on the Dashboards page of the Vulnerability Manager Workspace. For more information, see [Dashboards page in the Vulnerability Manager Workspace](https://servicenow-prod.fluidtopics.net/2xZMBwx48zDozvbNZJgOtQ "On the Dashboards page of the Vulnerability Manager Workspace, you can view the dashboards in the Next Experience UI and use these dashboards to track and analyze the vulnerabilities."). * View the Vulnerability Remediation dashboard in the Next Experience UI on the Dashboards page of the IT Remediation Workspace. For more information, see [Dashboards page in the IT Remediation Workspace](https://servicenow-prod.fluidtopics.net/D8mVjNkutVKLD1vlxpTJaA "The Dashboards page in the IT Remediation Workspace provides the Vulnerability Remediation dashboard in the Next Experience UI which can be used to focus on the remediation tasks and vulnerable items."). * Create the Remediation Tasks (VUL, AVUL, CVUL, or CRG) manually in the Vulnerability Manager Workspace and IT Remediation Workspace. For more information, see [Create a remediation task manually in the Vulnerability Manager Workspace](https://servicenow-prod.fluidtopics.net/vQIqsZlUCVt98~YtZQ_j2g "Starting with v25.0.4 of Vulnerability Response, you can create remediation tasks manually from the host vulnerable items, application vulnerable items, container vulnerable items, and configuration test results lists on the List page of Vulnerability Manager Workspace. You can also create remediation tasks from the drill-down lists that appear when you click on the visualizations on the Home page.") and [Create a remediation task manually in the IT Remediation Workspace](https://servicenow-prod.fluidtopics.net/DpLFz~cCkF31_6M1IdaRag "Starting with v25.0.4 of Vulnerability Response, you can create remediation tasks manually from the Host vulnerable items, Application Vulnerable items, Container vulnerable items, and Configuration test results lists on the List page of IT Remediation Workspace."). * Split the Remediation Tasks (VUL, AVUL, CVUL, and CRG) in the Vulnerability Manager Workspace and IT Remediation Workspace. For more information, see [Request exceptions for remediation tasks and records in the Vulnerability Manager Workspace](https://servicenow-prod.fluidtopics.net/bWo4zdNcYMgNqM8grmyNNw "From the Vulnerability Manager Workspace, vulnerability managers and analysts can request exceptions and false positives for a remediation task (VUL, AVUL, CVUL or CRG) and record (VIT, CVIT, AVIT or CTR). You can also split a remediation task and create change requests.") and [Split a remediation task in the IT Remediation Workspace](https://servicenow-prod.fluidtopics.net/N_xLIcgupxJNIxlxqApO5Q "From a remediation task (VUL, AVUL, CVUL, or CRG), identify a subset of records and create a new remediation task for them.") respectively. * Request the policy exceptions for vulnerable items (VITs, AVITs, and CVITs), and Remediation Tasks (VUL, AVUL, CVUL, and CRG) in the Vulnerability Manager and IT Remediation Workspaces. For more information, see [Request exceptions for remediation tasks and records in the Vulnerability Manager Workspace](https://servicenow-prod.fluidtopics.net/bWo4zdNcYMgNqM8grmyNNw "From the Vulnerability Manager Workspace, vulnerability managers and analysts can request exceptions and false positives for a remediation task (VUL, AVUL, CVUL or CRG) and record (VIT, CVIT, AVIT or CTR). You can also split a remediation task and create change requests.") and [Request an exception using GRC: Policy and Compliance Management in the IT Remediation Workspace](https://servicenow-prod.fluidtopics.net/38yXIXvAYsp_tE4vjSqz2w "Request a policy exception for the host vulnerable item (VIT), application vulnerable item (AVIT), container vulnerable item (CVIT) or remediation task (VUL, AVUL, CVUL, or CRG) from the IT Remediation Workspace.") respectively. * Create and track critical vulnerability events through the Vulnerability Crisis Management (VCM). For more information, see [Explore the Vulnerability Assessment Workspace](https://servicenow-prod.fluidtopics.net/u8sK2NCOophqngLNqHw_8w "The Vulnerability Assessment Workspace is designed for the Vulnerability event manager to perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event."). * Add compensating controls to the Compensating controls library in the Vulnerability Manager Workspace. For more information, see [Add a compensating control to the library](https://servicenow-prod.fluidtopics.net/CnRYfdkCzjQjmVMVX77y8A "As a Vulnerability Manager or Analyst, add a list of compensatory controls to the Compensating Controls library in the Vulnerability Manager Workspace, which can be applied for the risk reduction of host vulnerable items and remediation tasks."). * Request risk reduction for a host vulnerable item and remediation task from the IT Remediation workspace. For more information, see [Request risk reduction for a vulnerable item or remediation task](https://servicenow-prod.fluidtopics.net/YMFrQBxshcQZEz5fyQt00w "Request a reduction in risk for a host vulnerable item or a remediation task in the IT Remediation Workspace."). * Create an agile issue and a Jira issue for application and container vulnerable items from the Vulnerability Manager Workspace. For more information, see [Create agile issue manually using form action](https://servicenow-prod.fluidtopics.net/jL2M2xkFTLVzhGd_VGVsFQ "Create an agile issue manually using form action. If the record is matched with any configuration rule condition, then a pop-up box will be populated with values that are selected in the configuration rule and if it does not match any criteria then the user will be allowed to select values for pre-defined fields.") and [Create agile issue manually using list action](https://servicenow-prod.fluidtopics.net/faF33fqOIp98D_1M~4Cuiw "When a list action: Create Jira Issue is triggered, records that match the rule configuration criteria should be considered for “Create Jira Issue” and those records should be ingested into the sn_vul_agile_tool_manifest table with the mapping selected in the configuration rule."). {#vulnerability-response-workspaces-overview__ul_ot3_tns_byb} For more information about version compatibility with the family releases, refer to the [KB0856498 Vulnerability Response Compatibility Matrix and Release Schema Changes](https://support.servicenow.com/kb_view.do?sysparm_article=KB0856498) article in the HI Knowledge Base.