This migration guide highlights the key functional differences between ISC and SSC, helping customers understand how to perform their existing security management tasks within SSC’s improved framework.

Key Features

• Security Hardening: SSC allows customers to review and manually update compliance scores more intuitively via Overview and Hardening pages. Configuration edits are streamlined through direct links on multiple pages. Compliance score recalculation can be scheduled using the Scheduled Script Executions table, enabling automated refreshes aligned with organizational needs.
• Security KPIs and Metrics: SSC consolidates KPI and metric monitoring into a single interface with advanced analytics. Over 65 new metrics have been added, and users can now track score trends over time and set targets or thresholds for metrics, enhancing proactive security management.
• Security Scanner: SSC introduces new capabilities including the manual or scheduled execution of scans, creation of custom scan checks and suites, and comparison of scan results. Email notifications can be configured for security events, improving timely awareness and response.
• Additional Security Features: Session monitoring is enhanced with visualization through the Analytics Hub and accessible session activity tracking under Metrics. All learning resources are centralized in a single page for easier access, supporting user education and adoption.

User Interaction Updates

• SSC provides simplified navigation for security tasks such as running scans, viewing results, and managing metrics.
• Configuration and settings updates are more accessible from multiple locations within the application.
• Email notifications and scheduling features allow for automated and proactive security operations.

Practical Implications for ServiceNow Customers

ServiceNow customers currently using ISC should plan to migrate to SSC to leverage its enhanced security capabilities, automation options, and improved user experience. SSC supports better compliance management through automated scheduling and richer metric tracking, enabling more effective security posture monitoring.

Customers can customize scans and alerts to fit their environment and use consolidated dashboards to analyze security trends and KPIs efficiently. The migration ensures continued security support beyond ISC’s end of sales date while providing modernized tools to address evolving security requirements.

Next Steps

• Review current ISC configurations and identify equivalent SSC features for continuity.
• Set up SSC’s scheduled compliance score recalculations and email notifications for proactive monitoring.
• Explore SSC’s new metrics and scan customization capabilities to enhance security oversight.
• Access SSC learning resources to facilitate team training and smooth transition.
• If necessary, follow guidance to disable ISC components while maintaining SSC functionality.