---
sourceDocument: Yokohama Operational Technology Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/operational-technology

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Operational Technology Management

ft:clusterId :

    - optm

bundleId :

    - optm

workflow :

    - Technology


---

# Set up the Hardware Vulnerability Assessment of Operational Technology devices using guided setup

# Set up the Hardware Vulnerability Assessment of Operational Technology devices using guided setup {#ariaid-title1}

Release version: Yokohama  
Updated January 30, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the Industrial Workspace Admin guided setup to walk through configuring the Hardware Vulnerability Assessment feature available on the Industrial Workspace menu.

## Before you begin

Role required: admin

## About this task

Use the Industrial Workspace Admin guided setup to assign required user roles, configure a system property, and schedule jobs to perform the hardware vulnerability assessment of Operational Technology devices.

## Procedure

1. Navigate to AllIndustrial Workspace AdminGuided SetupOperational Technology Vulnerability Response.
2. Select Get Started for the Operational Technology Vulnerability Response application.
3. Select the Hardware Vulnerability Assessment task.
4. Select the following task tabs, then select Configure to complete the configuration tasks.

   | Task | Purpose |
   | User Roles assignment | Assign users or user groups with roles that enable them to use the Hardware Vulnerability Assessment feature. |
   | Install and Run NVD Integration | Run the National Vulnerability Database (NVD) integration to import data from the NIST NVD database to help you determine the severity and details of CVEs found in your environment. |
   | Configure Vulnerability Assessment properties | Configure the properties required to perform hardware vulnerability assessment for OT devices. |
   | Schedule Vulnerability Assessment Jobs | Execute scheduled jobs that enable vulnerability assessment on OT devices in the inventory and mark expired assessments that must be deleted. |
   | Normalization opt-in | Select the Firmware Discovery Model Opt-in option for ServiceNow Asset Management Content Service to collect unnormalized firmware details of OT devices and update the normalized content library. This process improves the ratio of normalized data mapping to CVEs and therefore improves assessment of vulnerabilities. |
   | Delete obsolete assessments | Configure the time duration after which the obsolete and expired assessments are deleted. |
   |-|-|

* **[Assign roles for Hardware Vulnerability Assessment](https://servicenow-prod.fluidtopics.net/CC5TwXXaD56t7YVkyPt_4A)**   
  Assign roles to users so that they can configure properties, and use hardware vulnerability assessments features, capabilities, and data.
* **[Run NVD Integrations for Hardware Vulnerability Assessment](https://servicenow-prod.fluidtopics.net/15P7z~ZFegDscxRKuUHQwg)**   
  Install and run National Vulnerability Database (NVD) integrations to perform hardware vulnerability assessment.
* **[Configure the properties for Hardware Vulnerability Assessment](https://servicenow-prod.fluidtopics.net/VHI3pd8wvzDEgyaeZe9eRQ)**   
  Configure the properties required to perform hardware vulnerability assessment.
* **[Run scheduled jobs to perform Hardware Vulnerability Assessment](https://servicenow-prod.fluidtopics.net/M0JcOlCXr8f~gcaUEPKhnw)**   
  Execute scheduled jobs to perform hardware vulnerability assessment.
* **[Configure Normalization Opt-in for Hardware Vulnerability Assessment](https://servicenow-prod.fluidtopics.net/l7_cXoq2WVVLoxeYcQc~lQ)**   
  Select Firmware Discovery Model Opt-in option for ServiceNow Asset Management Content Service to collect unnormalized firmware details of Operational Technology (OT) devices and update the normalized content library. This process improves the ratio of normalized data mapping to CVEs and therefore improves assessment of vulnerabilities.
* **[Delete obsolete and expired hardware vulnerability assessments](https://servicenow-prod.fluidtopics.net/5TdkTzXcfhTMyOVv3Rs1Mg)**   
  Set up automatic deletion of obsolete or expired assessment records.

**Related concepts**   

* [Operational Technology Hardware Vulnerability Assessment](https://servicenow-prod.fluidtopics.net/Wf4g7_BKQpsN86ewcSxfYA "The Operational Technology (OT) Hardware Vulnerability Assessment (HVA) application enables you to assess the firmware vulnerabilities of the OT devices in inventory and create vulnerable items (VIT) against the impacted OT devices.")  
**Related topics**   

* [Guided Setup](https://www.servicenow.com/docs/access?context=guided-setup&version=yokohama&pubname=yokohama-platform-user-interface&ft:locale=en-US)

*[\>]: and then