Installation of Vulnerability Response and supported applications
Summarize
Summary of Installation of Vulnerability Response and Supported Applications
The Vulnerability Response application is essential for managing vulnerabilities within ServiceNow. It is available through the ServiceNow Store and supports third-party integrations. Initial setup requires the installation of the Vulnerability Response application, followed by configuration through the Setup Assistant.
Show less
Key Features
- Basic Setup: Install the Vulnerability Response application first, then configure user access, assignment rules, remediation tasks, and risk calculators using the Setup Assistant.
- Third-Party Integrations: Retrieve external vulnerability data by selecting and configuring supported integrations after running the NVD and CWE scheduled jobs.
- Performance Analytics: Optionally install the Performance Analytics Content Pack to access reports across the vulnerability management lifecycle.
- Solution Management: Optionally install the Solution Management application to correlate vulnerabilities with potential remediation solutions, requiring a separate subscription.
- Mobile Experience: Optionally install the ServiceNow Agent app and the Vulnerability Response Mobile app for enhanced mobile access.
Key Outcomes
After completing the installation and configuration, customers can efficiently manage vulnerabilities, leverage integrated data from external sources, and utilize analytics for informed decision-making. Additional advanced configuration tasks are available for those with coding expertise to further enhance their setup, supporting comprehensive vulnerability management in their environment.
The Vulnerability Response application is available from the ServiceNow Store. The application supports other ServiceNow applications and third-party integrations that you also download from the ServiceNow Store. More options also are available to extend the basic setup.
Tasks for basic setup
The Vulnerability Response application is required as a first step. For more information about installing it, see Implementation checklist for the Vulnerability Response application and Install the Vulnerability Response application.
- After installation is completed, you can Configure Vulnerability Response using
Setup Assistant.
With the Setup Assistant, assign users and groups for access to the application, create or edit assignment rules, remediation task rules, and target dates, set up risk calculators.
- You can also select, install, and configure one or more supported third-party integrations from the Setup Assistant. These integrations retrieve vulnerability data from external systems and vendors. For more information about how integrations work and the integrations supported by Vulnerability Response, see Vulnerability Response integrations.
- Prior to implementing any third-party integrations, run the NVD integration and CWE
scheduled job as part of your initial setup of Vulnerability Response.
See Importing data with the NVD and CWE integrations and managing third-party libraries and Configure and run the scheduled job for updating CWE records for more information about installing, configuring, and viewing the NVD and CWE libraries.
- Select an analytics application, when applicable. The Performance Analytics Content Pack
for Vulnerability Response application contains reports that cover all stages of the
vulnerability management lifecycle.
[Optional] Install and configure the Performance Analytics for Vulnerability Response [PA] application application.
- Select a solutions application, when applicable. Solution management helps you correlate
the vulnerabilities in your environment with the solutions that could remediate them.
[Optional] Install the Solution Management for Vulnerability Response application.Note:
- When the Vulnerability Solution Management application is enabled, the Microsoft Security Response Center Solution Integration and the Red Hat Solution Integration are available to edit in Setup Assistant.
Vulnerability Solution Management requires a separate subscription. For more information, see Vulnerability Solution Management.
- [Optional] Install the ServiceNow Agent app and the Vulnerability Response Mobile app for the Mobile experience for Vulnerability Response.
Other setup tasks you can perform
These additional setup tasks add to your basic configuration and support remediation with options for reporting, email notifications, native integration configuration, and working with vulnerable items. Most of these tasks are performed outside of the Setup Assistant. See Additional Vulnerability Response setup and configuration tasks.
Advanced tasks outside of the basic setup
These optional configuration tasks are performed outside of Setup Assistant and require coding or advanced ServiceNow expertise and are not considered part of the basic configuration. See Advanced Vulnerability Response configuration tasks.