---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# View Vulnerability Response SLAs for remediation tasks

# View Vulnerability Response SLAs for remediation tasks {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

To ensure that vulnerable items are processed correctly, you can define a Service
Level Agreement (SLA) for Vulnerability Response remediation tasks.

## Before you begin

Role required: sn_vul.vulnerability_admin or sn_vul.admin (deprecated)

Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see [Assign the Vulnerability Response persona roles using Setup Assistant](https://servicenow-prod.fluidtopics.net/msi8kaFkGNjyRib_XBHEzQ "Assign the Vulnerability Response persona roles to groups or users with Setup Assistant."). For more information about managing granular roles, see [Manage persona and granular roles for Vulnerability Response](https://servicenow-prod.fluidtopics.net/WeKNf9YHNMJmJIA6yCsRvA "After you complete your initial assignment of persona roles using Setup Assistant, manage additional granular role assignments to users or groups from the User Administration module in your instance.").

## About this task

The SLA definitions in this list are a subset of the platform SLA list, specific to Vulnerability Response.

For detailed instructions, see [Create an SLA definition](https://www.servicenow.com/docs/access?context=t_CreateAnSLADefinition&version=australia&pubname=australia-it-service-management&ft:locale=en-US).

If you are tracking the time it takes to remediate VIs, you might prefer to use [Vulnerability Response remediation target rules](https://servicenow-prod.fluidtopics.net/Rk0nNjDmu1fZ7GxcJJ20Jg "Remediation target rules define the expected time frame for remediating vulnerable items (VI), much like SLAs provide a time frame for remediating the vulnerability itself. For example, if an asset contains PCI data (credit card data) then the vulnerability on that item must be fixed within 30 days according to PCI DSS."). Remediation target rules define the expected time frames for remediating vulnerable items (VI) specifically within the context of Vulnerability Response, whereas SLAs might provide a time
frame for remediating the vulnerability itself.

## Procedure

1. Navigate to AllVulnerability ResponseAdministrationSLA Definitions.
2. Click on a definition.  
   Task SLAs are shown in the related lists of Remediation Tasks.
{#t_CreateVulnSLA__steps_jdj_pnj_ks}

*[\>]: and then