---
sourceDocument: Xanadu Operational Technology Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/operational-technology

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Operational Technology Management

ft:clusterId :

    - optm

bundleId :

    - optm

workflow :

    - Technology


---

# Assign vulnerable items to groups

# Assign vulnerable items to groups {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure OT Vulnerability assignment rules.

## Before you begin

OT Vulnerable Items can be assigned to site level groups or groups based on
classification, depending on your remediation strategy.

Role required: sn_vul.manage_assignment_rules or sn_vul.vulnerability_admin

## About this task

When Vulnerable Items are imported, they are assigned to the appropriate group based
on Vulnerability Assignment Rules. Operational Technology Vulnerability Response ships with one OT
vulnerability assignment rule, Operational Technology (OT) assignment rule, which assigns OT vulnerable item records (VIT) to the
corresponding OT VR assignment group based on its site. If it does not belong to any
site, or if there's no group specified on the site, the rule assigns to the OT VR
Default Assignment Group.

For more information about creating Vulnerability Response assignment rules, see [Create or edit Vulnerability Response assignment rules](https://www.servicenow.com/docs/access?context=create-vul-assign-rules&version=xanadu&pubname=xanadu-security-management&ft:locale=en-US).

## Procedure

1. From the Vulnerability Assignment Rules list, select Operational Technology (OT) assignment rule.
2. Configure it based on your remediation strategy:
   * If your remediation strategy is to assign all OT Vulnerable Items to the site, set the execution order of the OT VR Assignment rule to be less than all other rules.
   * If your strategy is to assign by class and then assign to sites for all other classes, set the execution order of the OT VR Assignment Rule to be greater than all class-based rules.
   {#assign-vulnerable-items-to-groups__choices_ox5_rjr_3rb}
3. Once the execution order is updated, set the OT VR Assignment Rule Active state to true.
{#assign-vulnerable-items-to-groups__steps_q5r_kjr_3rb}

## What to do next

[Configure OT remediation target rules](https://servicenow-prod.fluidtopics.net/PvhAJJZes5YiXpT_Qt5KTw "Configure remediation target rules for OT vulnerable items.").