---
sourceDocument: Xanadu Operational Technology Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/operational-technology

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Operational Technology Management

ft:clusterId :

    - optm

bundleId :

    - optm

workflow :

    - Technology


---

# Configure OT vulnerability risk rollup calculator

# Configure OT vulnerability risk rollup calculator {#ariaid-title1}

* Release version: Xanadu
* 
* Updated September 4, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read

Use the OT vulnerability risk rollup calculator to calculate the risk score of the OT devices at each level of the equipment model. The overall risk score is rolled up to the parent equipment model entity.

## Before you begin

* Calculate the risk score for all the equipment model entities by executing the scheduled job.  
  Note:  
  The risk score calculation for all the equipment model entities is only for the subsequent run of the daily schedule job.
* Check that the Service Populator column in the Equipment Model Entities list is set to OTDynamicManualServicePopulator by navigating to AllEquipment Model - ISAEquipment Model Entities. If it's set to other values, you must execute the Update ISA entity service populator on-demand job:
  * Navigate to AllSystem DefinitionScheduled Jobs.
  * Select the Update ISA entity service populator job.
  * Select Execute Now.

  Note:  
  If you don't see the Service Populator column in the Equipment Model Entities list, you can add it by personalizing the list. For more information, see [Personalize a list](https://www.servicenow.com/docs/access?context=c_PersonalLists&version=xanadu&pubname=xanadu-platform-user-interface&section=t_PersonalizeAList&ft:locale=en-US).
* Role required: sn_vul.vulnerability_admin

## About this task

For this step, refer to the Vulnerability Rollup Calculators with OT vulnerability
calculator shipped with the Operational Technology Vulnerability Response application demo
data.

For more information, see [Vulnerability Response
Rollup Calculators](https://www.servicenow.com/docs/access?context=vuln-rollup-calculator&version=xanadu&pubname=xanadu-security-management&ft:locale=en-US).  
To calculate the risk score for the equipment model entity, set up the weights for these fields:

* Maximum risk score of the Vulnerable Items (VITs) associated to the equipment model entity.
* Average risk score of the VITs associated to the equipment model entity.
* Number of vulnerable items per equipment model entity.
{#configure-risk-rollup-calculator__ul_jfx_gmg_ftb}

## Procedure

1. Navigate to AllVulnerability ResponseAdministrationVulnerability Rollup Calculator.
2. From the Vulnerability Rollup Calculators list, select Equipment Model Entity Rollup.
3. If required, in the Rollup Weights section, update the weight for each criterion.
4. Select Update.

## What to do next

Now, you can calculate the risk associated at a level for your equipment model entities.

1. Calculate the risk rollup for all equipment model entities:
   1. Navigate to AllIndustrial Workspace AdminGuided Setup.
   2. Select Operational Technology Vulnerability Response.
   3. In the Risk roll up calculation section, select the Risk roll-up configuration task.
   4. Select Configure.
   5. Follow the steps described in the Guided Setup.
2. Configure the Risk Rollup for VITs by Equipment Model Entity scheduled job:
   1. Navigate to AllIndustrial Workspace AdminGuided Setup.
   2. Select Operational Technology Vulnerability Response.
   3. In the Risk roll up calculation section, select the Daily Schedule job for risk roll up task.
   4. Select Configure.
   5. Follow the steps described in the Guided Setup.  
      Note:  
      By default, the job is set to run daily. You can change this to fit your business needs by editing the Run, Time zone, and Time fields.
   {#configure-risk-rollup-calculator__ol_yvy_cnm_31c}
3. Configure the entities for risk score roll-up:
   1. Navigate to AllIndustrial Workspace AdminGuided Setup.
   2. Select Operational Technology Vulnerability Response.
   3. In the Risk roll up calculation section, select the Set All Entities for Risk score Roll-Up Job task.
   4. Select Configure.
   5. Follow the steps described in the Guided Setup.
   {#configure-risk-rollup-calculator__ol_ims_lnm_31c}
4. To avoid getting the wrong risk score and rating for remediation tasks, change the Table field in the OT Devices with No sites Assigned Rollup record:
   1. Navigate to AllSystem DefinitionScripts - Background.
   2. In the Run script field, add the following script.

          var gr = new GlideRecord('sn_vul_rollup');

          gr.get('sys_id','24973dc4939e42900b1566f4548918eb');

          gr.table = 'sn_ot_metric';

          gr.update();

   3. Select Run script.
   4. To check the value of the Table field in the OT Devices with No sites Assigned Rollup record and run the scheduled job, navigate to AllVulnerability ResponseAdministrationVulnerability Rollup Calculator.
   5. Select the OT Devices with No sites Assigned Rollup record.
   6. Ensure that the Table field is set to OT Metric \[sn_ot_metric\].
   7. Run the scheduled job.After running the job, the correct VIT risk scores and ratings are rolled up to the remediation tasks.

   {#configure-risk-rollup-calculator__ol_iwr_tkc_4cc}

*[\>]: and then