Platform Analytics Solutions for Application Vulnerability Response

  • Release version: Yokohama
  • Updated January 30, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Platform Analytics Solutions for Application Vulnerability Response

    The Platform Analytics Solutions for Application Vulnerability Response provide prepackaged analytics content designed to enhance the Application Vulnerability Management process using ServiceNow AI Platform products. This solution offers key metrics and dashboards to analyze, track, and manage application vulnerabilities effectively.

    Show full answer Show less

    The Performance Analytics for Vulnerability Response content pack is available separately on the ServiceNow Store and is not automatically installed with the Vulnerability Response application. It includes the Application Vulnerability Response content pack as part of its offering. Proper installation and configuration guidance is provided to enable customers to set up this analytics solution efficiently.

    Key Features

    • Performance Analytics (PA): Provides management dashboards, KPI reports, and metric tracking to improve quality and reduce costs.
    • Application Vulnerable Item (AVI): Tracks vulnerabilities detected on configuration items by third-party scanners.
    • PA Indicators and Sources: Define and collect performance measurements regularly, such as the “Top 10 Applications with the Most Critical AVIs.”
    • Dashboards:
      • Application Vulnerability Management (PA) Dashboard: Displays KPIs related to vulnerability risk, affected applications, remediation trends, and progress. Supports customizable trend periods from 7 days to all-time.
      • My Application Vulnerabilities Dashboard: Focuses on volume, performance, and progress of vulnerabilities from detection through remediation. This dashboard is a subset of the Overview dashboard and is accessible only to users in the Security Champion group.

    Roles and Responsibilities

    • ServiceNow AI Platform Administrator (admin): Responsible for installing, activating, and configuring the analytics solution and system properties.
    • Performance Analytics Administrator (paadmin): Manages indicators, dashboards, data collection, and shares dashboards with stakeholders.

    Benefits for ServiceNow Customers

    This solution enables ServiceNow customers to visually monitor and analyze application vulnerabilities, prioritize remediation efforts based on risk, and track remediation progress efficiently. By leveraging these analytics, customers can improve vulnerability response quality, reduce risk exposure, and make data-driven decisions to strengthen their security posture.

    Platform Analytics Solutions contain prepackaged Platform Analytics content for use with other ServiceNow AI Platform products. This Platform Analytics Solution presents important metrics for analyzing your Application Vulnerability Management process.

    Overview

    The Performance Analytics for Vulnerability Response content pack is available on the ServiceNow® Store as a separate subscription. The application is not automatically installed with the Vulnerability Response application. The Application Vulnerability Response content pack is a part of the Performance Analytics for Vulnerability Response content pack.

    For more information about setting up, installing, and configuring your Performance Analytics for Vulnerability Response application, see Install and configure the Performance Analytics for Vulnerability Response [PA] application.

    Key terms

    Performance analytics (PA)
    Solution that creates management dashboards, reports on KPIs and metrics, and answers key business questions to help increase quality and reduce costs.
    Application Vulnerable item (AVI)
    An application vulnerability reported by a third-party vulnerability scanner that is present on a configuration item (CI).​
    PA indicator​
    Defines a performance measurement taken at regular intervals of an activity, or organizational behavior, for example, Top 10 Applications with the Most Critical Application Vulnerable Items.
    PA indicator source
    Data sets that filter records from one table or database view, for example, AVI Active​.
    • The the My Application Vulnerabilities dashboard tracks the volume, performance, and progress of application vulnerabilities from initial analysis/detection to containment, or remediation.
    • View remediation target attainment rates and efficiently determine which application vulnerable items (AVIs) present the most risk to your organization.

    Required roles

    The following roles and tasks are associated with this Solution:
    • ServiceNow AI Platform administrator (admin): Install and activate this Analytics and Reporting Solution and make any necessary changes to system properties.
    • Performance Analytics administrator (pa_admin): Review the indicators, breakdowns, widgets, and dashboards. Set up and start data collection. Share the dashboards with appropriate stakeholders.

    The following dashboards provide a graphical view into AVI activity to help determine remediation plans and status progress. You can focus on the KPIs associated with critical affected applications and high-visibility vulnerabilities.

    • The Application Vulnerability Management (PA) dashboard communicates KPIs for vulnerability risk and prevalence, affected applications, remediation trends, and remediation progress. The default for trends is three months but can be changed to 7 day, one month, 3 months, 6 months, YTD, 1 year, or All.
    • The the My Application Vulnerabilities dashboard tracks the volume, performance, and progress of application vulnerabilities from initial analysis/detection to containment, or remediation.
      Note:
      The My Application Vulnerabilities dashboard is a subset of the Overview dashboard and only available when a member of the Security Champion user group logs into an instance. For more information on the My Application Vulnerabilities dashboard, see My Application Vulnerabilities dashboard.