---
sourceDocument: Xanadu Release Notes
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/release-notes

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Release Notes

ft:clusterId :

    - rn

bundleId :

    - rn


---

# Operational Technology Vulnerability Response release notes

# Operational Technology Vulnerability Response release notes {#ariaid-title1}

* Release version: Xanadu
* 
* Updated January 23, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 6 minutes to read

The ServiceNow®
Operational Technology Vulnerability Response application enables you to prioritize Operational Technology (OT) vulnerabilities at a site level. Operational Technology Vulnerability Response was enhanced and updated in the Xanadu release.

## Operational Technology Vulnerability Response highlights for the Xanadu release {#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-highlights}

* Assess the vulnerabilities for the firmware of the OT assets with Hardware Vulnerability Assessment.
* View solutions or details of a vulnerable item (VIT) with enhanced UI options.
* Manage your vulnerable items and Operational Technology Vulnerability Response data with the enhanced OTVR (PA) dashboard in the Industrial Workspace.
* View the risk score of your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard.
* Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once.
* Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers.
* Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role.
* Mitigate controls using the Libraries module in the Industrial Workspace.
* Use the enhanced OTVR (PA) dashboard.
{#operational-technology-vulnerability-response-rn__ul_jg3_t1l_w1c}

See [Operational Technology Vulnerability Response](https://www.servicenow.com/docs/access?context=oper-tech-vulnerability-response-landing-page&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US) for more information.{#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-highlights-2}
Important:  
Operational Technology Vulnerability Response is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.

## New in the Xanadu release {#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-new-features}

[Hardware Vulnerability Assessment menu in the Industrial Workspace](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Automatically and periodically assess the OT device firmware vulnerabilities that are in your inventory and create vulnerable items against the impacted assets (CI).

[Risk scores on the OT Vulnerability Risk Rollup dashboard](https://www.servicenow.com/docs/access?context=ot-risk-rollup-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   View a table of risk scores for your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard.

[Enhanced OTVR (PA) dashboard experience](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   View and manage all of your OT vulnerability data and data visualizations in a centralized location with the enhanced OTVR (PA) dashboard, which is accessible on the Dashboard Library
    page.

[OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role](https://www.servicenow.com/docs/access?context=components-installed-with-operational-technology-vulnerability-response&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Assign the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role to users who primarily work on an assigned remediation task and can create change tasks when needed. The OT Vulnerability Remediation Owner role
    contains the following roles:

    * cmdb_ot_isa_viewer
    * cmdb_ot_viewer
    * sn_vul.close_vi_vg
    * sn_vul.remediation_owner
    {#operational-technology-vulnerability-response-rn__ul_z2s_j1f_kbc}

[Automatically set a start time for a remediation task based on the ISA maintenance schedule](https://www.servicenow.com/docs/access?context=create-remediation-task&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Start a remediation task automatically based on the ISA maintenance schedule. After you create the remediation task, it's picked up during the next scheduled maintenance.

[Common Security Advisory Framework (CSAF) supported for Operational Technology Vulnerability Response](https://www.servicenow.com/docs/access?context=csaf-overview&version=xanadu&pubname=xanadu-security-management&ft:locale=en-US)
:   Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers.

[OTVR (PA) dashboard Guided Setup](https://www.servicenow.com/docs/access?context=setting-up-the-otvr-pa-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Use the OTVR (PA) dashboard Guided Setup under the Operational Technology Vulnerability Response section in the Industrial Workspace
    Guided Setup to configure data collection and review indicator sources.

[Change the Operational Technology Vulnerability Response (OT VR) assignment group field in a bulk edit](https://www.servicenow.com/docs/access?context=bulk-edit-assignment-group-otvr&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Use the bulk edit feature to update the OT VR assignment group field in multiple site records at once.

[Use compensating controls for Operational Technology](https://www.servicenow.com/docs/access?context=compensating-controls-for-ot&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Use compensating controls for OT to reduce vulnerability risks that can't be patched immediately. Compensating controls help mitigate risks.

## UI changes {#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-ui-changes}

[Dashboard Library icon](https://www.servicenow.com/docs/access?context=ot-manager-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   The Dashboard Library icon (![dashboard library icon]()) was added to the Industrial Workspace and contains the available dashboards for Operational Technology, including the OTVR (PA) dashboard.

[Site filter on the OTVR (PA) dashboard and the OT Vulnerability Risk Rollup dashboard](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   A site filter was added to both the OTVR (PA) dashboard and the OT Vulnerability Risk Rollup dashboard in the Industrial Workspace so you can filter the displayed data by a chosen site.

[Vulnerability Solutions section in the List menu of Industrial Workspace](https://www.servicenow.com/docs/access?context=view-solutions-of-vit-in-industrial-workspace&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   A new Vulnerability Solutions section was added in the List menu (![List icon]()) of the Industrial Workspace. In the Solutions section, you can view the solutions for the enlisted VITs.

[Overview tab for a vulnerable item](https://www.servicenow.com/docs/access?context=ot-vulnerable-item-fields&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   The Overview tab in a VIT provides important information about the VIT, such as State, Risk Rating, Risk Score, Associated Vulnerability, and more.

[Libraries module in the Industrial Workspace](https://www.servicenow.com/docs/access?context=view-cves-in-industrial-workspace&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   You can use the Library module in the Industrial Workspace to perform the following functions:

    * Enable compensating controls
    * Associate compensating control to a Common Vulnerability and Exposure (CVE)
    * Disable risk reduction on a CVE

    {#operational-technology-vulnerability-response-rn__ul_zkb_yyv_zbc}These functions help reduce the risk posed by vulnerabilities that can't be addressed immediately. The Libraries module includes the CVEs list and the Compensating Controls
    list.

[Vulnerable items by state chart in the OT Vulnerabilities tab on the OTVR (PA) dashboard](https://www.servicenow.com/docs/access?context=ot-manager-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   The Vulnerable items by state chart in the OT Vulnerabilities tab is organized sequentially by state.

[OTVR (PA) dashboard updates](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   The OTVR (PA) dashboard was updated with the following features:

    * You can now view data in the OT VIs Met Remediation Target and the OT VI Mean Time to Remediate (MTTR) widgets by the following time frames:
      * The last month
      * The last 3 months
      * The last 6 months
      * The last year
      * All time
      {#operational-technology-vulnerability-response-rn__ul_ppp_c4t_5bc}
    * The OT Remediation Tasks and OT Critical Remediation Tasks Near Due widgets were moved under the Remediation tab.
    * The OT Unassigned Vulnerable Items widget was moved under the Overview tab.
    * You can select the OT Vulnerable Items (VI) widget under the Overview tab to open a list of vulnerable items.
    * The OT Vulnerable Items (VI) and OT Vulnerable Configuration Items (CI) widgets show an OT class-level breakdown.
    {#operational-technology-vulnerability-response-rn__ul_opp_c4t_5bc}

[Support for Exception Management for remediation tasks in the Industrial Workspace](https://www.servicenow.com/docs/access?context=defer-remediation-task&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Use Exception Management for remediation tasks to defer vulnerable items. You can defer a remediation task by selecting the Request Exception button in a remediation record in the Industrial Workspace.

## Changed in this release {#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-changed-features}

[OT Vulnerabilities tab data](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   The following data that was available in the OT Vulnerabilities tab of the OT Manager dashboard has been moved to the OTVR (PA) dashboard:

    * Total OT Vulnerable Items
    * New OT Vulnerable Items
    * OT Unassigned Vulnerable Items
    * OT Vulnerable Items by State
    * OT Vulnerable Items by Risk Rating
    {#operational-technology-vulnerability-response-rn__ul_fjb_wlf_rdc}

## Deprecations {#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-deprecations}

* The OT Vulnerabilities tab is no longer available on the OT Manager dashboard in the Industrial Workspace.
* Starting with the Xanadu release, Vulnerability Response Integration with Microsoft Defender for IoT (On-premises Management Console) integration is being prepared for future deprecation. It will be hidden and no longer activated on new instances but will continue to be supported.
{#operational-technology-vulnerability-response-rn__ul_sfs_1rh_rkb}

## Activation information {#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-activation}

Install Operational Technology Vulnerability Response by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/bundle/store-release-notes/page/release-notes/store/sn-store-release-notes.html).{#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-activation-1}

## Related ServiceNow applications and features {#operational-technology-vulnerability-response-rn__operational-technology-vulnerability-response-rn-related-apps}

[CMDB CI Class Models](https://www.servicenow.com/docs/access?context=cmdb-ci-class-models&version=xanadu&pubname=xanadu-servicenow-platform&ft:locale=en-US)
:   The CMDB CI Class Models store app adds class models that extend the CMDB class hierarchy, including class descriptions, identification rules, identifier entries, and dependent relationships.

[Vulnerability Response](https://www.servicenow.com/docs/access?context=vuln-landing-page&version=xanadu&pubname=xanadu-security-management&ft:locale=en-US)
:   When integrated with Operational Technology Vulnerability Response, the ServiceNow®
    Vulnerability Response application aids you in prioritizing and resolving OT vulnerabilities based on process criticality.

[Operational Technology Manager](https://www.servicenow.com/docs/access?context=operational-technology-manager&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   ServiceNow®
    Operational Technology Manager enables you to aggregate OT device data from multiple sources so that you can build the foundational data relationships used in the Industrial solution.

[Industrial Process Manager](https://www.servicenow.com/docs/access?context=industrial-process-manager-overview&version=xanadu&pubname=xanadu-operational-technology&ft:locale=en-US)
:   Use the ServiceNow®
    Industrial Process Manager application to create the ISA-95 Equipment Model data foundation that is required for the ServiceNow®
    Industrial solution, enabling you to create your own version of the equipment models in each of your industrial solution sites.