Key Features

• Industrial Workspace Access: Provides a centralized landing page and menus for managing OT vulnerabilities.
• OTVR (PA) Dashboard: Tracks the volume, performance, and progress of vulnerable items from detection to containment or remediation. Users can filter reports by assignment group, exploits, risk rating, or state to gain detailed insights into vulnerability exposure and affected services.
• OT Vulnerability Risk Rollup Dashboard: Displays vulnerability risk scores in two tables: one for equipment model entities and another for OT devices without assigned sites.
• List Menu: Allows viewing of all accessible OT Vulnerable Item records and remediation tasks assigned to the user or their groups. Includes views for remediation tasks, vulnerable items, and exception requests.
• Equipment Model Manager: Facilitates viewing OT vulnerable items and creating remediation tasks linked to specific equipment model entities.
• Hardware Vulnerability Assessment: Manages vulnerability assessments of OT device firmware, with tabs for fully matched, partially matched, ignored assessments, vulnerable items, and those awaiting normalization.
• Remediation Task Management: Enables creation of remediation tasks for equipment model mapped OT devices, selection of start times based on equipment schedules, splitting of remediation tasks, and deferral via exception requests.
• Compensating Controls: Supports management of alternative security measures when immediate patching of OT vulnerabilities is not feasible.

Practical Use and Benefits

This application empowers ServiceNow customers to maintain operational technology security by providing comprehensive tools to track and mitigate vulnerabilities. It ensures visibility into risk exposure through dashboards and list views, supports efficient remediation task management, and accommodates real-world constraints with compensating controls and exception handling. Users can expect streamlined workflows that integrate with existing IT and OT asset data, enhancing overall vulnerability management and risk reduction in industrial environments.