Vulnerability Manager Workspace

You can deactivate or activate a watch topic in the Vulnerability Manager Workspace.

Compensating controls are the measures taken to reduce the risk posed by vulnerabilities that can't be patched immediately. They can be used to mitigate the likelihood or impact of a successful exploit.

As a Vulnerability Manager or Analyst, add a list of compensatory controls to the Compensating Controls library in the Vulnerability Manager Workspace, which can be applied for the risk reduction of host vulnerable items and remediation tasks.

When you create remediation tasks manually in the Vulnerability Manager Workspace and IT Remediation Workspace, records are grouped into a remediation task based on the grouping criteria you select.

Exception rules are applied directly to the Vulnerable Items (VIT) eliminating the process of creating a remediation task. Auto- Exception Rule column is added to the form view, which populates the current exception rule applied on the Vulnerable Item (VIT)

As a Vulnerability Manager and Analyst, you can restrict or enable risk change for the host vulnerabilities associated with a Common Vulnerability Entry (CVE) or Third-party Entry (TPE) in the Vulnerability Manager Workspace.

You can edit or delete an existing watch topic in the Vulnerability Manager Workspace.

Starting with v23.0 of Vulnerability Response, control the import of the test results for the tests in a Qualys test group by using the Enable/Disable import button, which is available in the test group's record view.

As a vulnerability manager and analyst, get a unified view of all the vulnerability types in the Vulnerability Manager Workspace. You can see host, application, and container vulnerabilities and configuration issues, create watch topics across these vulnerabilities and misconfigurations, create remediation efforts and remediation tasks.

Request an extension for a deferred vulnerable item before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.

In the Vulnerability Manager Workspace, you can remediate vulnerable items and test results by into a watch topic by defining a condition and you can track their remediation progress by creating remediation efforts.

As a Remediation Owner, you can request risk reduction for a host vulnerable item or remediation task. And the Vulnerability Manager or Analyst can approve these risk reduction requests.

The Vulnerability Manager Workspace enables you to monitor vulnerable items (VITs, AVITs, and CVITs) and Test Results (TRs) using watch topics, and track and manage their remediation progress by creating remediation efforts.

Assign multiple records (VITs, AVITs, CVITs, or TRs) concurrently to an assignment group using the bulk edit feature in the Vulnerability Manager Workspace.

Close multiple records (VITs, AVITs, or CVITs) concurrently using the bulk edit feature in the Vulnerability Manager Workspace.

In the Vulnerability Manager Workspace, the bulk edit feature enables you to update multiple vulnerable items (VITs, AVITs, or CVITs) or configuration test results (TRs) simultaneously, streamlining the management and remediation process.

Recommend a patch or solution for multiple host vulnerable items concurrently using the bulk edit feature in the Vulnerability Manager Workspace.

Request an exception for multiple records (VITs, AVITs, CVITs or TRs) concurrently using the bulk edit feature instead of manually selecting each record.

Mark one or more records (VITs, AVITs, CVITs, or TRs) as false positive concurrently using the bulk edit feature from the Vulnerability Manager Workspace instead of manually selecting each item.

Remove yourself or your groups from the  Assigned to  and  Assignment group  fields on host vulnerable items (VITs) or remediation tasks (VUL) if you determine that the records aren’t within your scope for remediation, or if you think that records have been incorrectly assigned to you or to your groups.

Update the state of multiple records (VITs, AVITs or CVITs) concurrently according to their remediation progress using the bulk edit feature in the Vulnerability Manager Workspace.

Open search results in Vulnerability Manager Workspace instead of classic UI by changing the application scope.

You can create a customized list in the Vulnerability Manager Workspace.

Starting with v25.0.4 of Vulnerability Response, you can create remediation tasks manually from the host vulnerable items, application vulnerable items, container vulnerable items, and configuration test results lists on the List page of Vulnerability Manager Workspace. You can also create remediation tasks from the drill-down lists that appear when you click on the visualizations on the Home page.

In the Vulnerability Manager Workspace, when you evaluate the exception rules for a set of records in the Re-evaluate and update the remediation properties modal, their deferral status and until date of deferral are updated as per the latest exception rules.

As a vulnerability manager and analyst, you can filter the desired records to visualize their summary on the Home page of the Vulnerability Manager Workspace.

The Home page in the Vulnerability Manager Workspace provides a summary of active records by showcasing visualizations of risk rating, remediation progress, assignments to assignment groups, records in remediation tasks, and vulnerabilities from cloud resources.

The List page in the Vulnerability Manager Workspace permits vulnerability and security managers and analysts to view remediation progress on records, drill down into records, and view the status of their approval requests and exceptions.

As a vulnerability manager or analyst, you can modify the severity level of Common Vulnerability Entry (CVE) or Third-party Entry (TPE) in the Vulnerability Manager Workspace.

Evaluate the assignments, remediation target date, remediation tasks, exceptions, and risk score for a set of records (VITs, AVITs, CVITs or TRs) in the Vulnerability Manager Workspace.

The following topics provide you with links, reference information, in addition to field data on the forms and records found in Vulnerability Manager Workspace.

A Remediation Effort is a set of records that are associated with a watch topic. The records listed on a remediation effort are static. They are not updated by new import data or changes that you make to watch topics.

In the Vulnerability Manager Workspace, you can update the state of the records, request exceptions and false positives, and assign records to an assignment group multiple vulnerable items (VITs, AVITs, or CVITs) simultaneously using the bulk edit feature.

The Watch Topics page in the Vulnerability Manager Workspace enables you to create and edit a watch topic. A Watch topic is a set of data visualizations which enables you to monitor a filtered set of records (VITs, AVITs, CVITs and CTRs) over time on a dashboard that might be of a particular interest or priority to your organization.

The Unified Vulnerability Response Dashboard is a centralized aggregated dashboard that provides visibility from multiple vulnerability scanners and security tools to provide a comprehensive view of an organization's vulnerabilities and risks.

The Unified Vulnerability Response dashboard provides a comprehensive view of an organization's vulnerabilities and risks. The vulnerabilities related to infrastructure, cloud, applications, and containers can be viewed in a centralized dashboard for better visibility and remediation.

Approve or reject requests that are submitted by remediation owners.

You can create and schedule recurring remediation efforts that are generated automatically on the dates and times that you set.

A remediation effort record is a static list of records that you create from a watch topic in the Vulnerability Manager Workspace.

Create a remediation task on-demand from a remediation effort. If you create a remediation task on-demand, you choose the records you want to add manually.

The following table describes the fields in the Create Watch Topic form in the Vulnerability Manager Workspace.

Vulnerability managers and analysts can create watch topics using a set of conditions to filter out subsets of records (VITs, AVITs, CVITs or CTRs) that they want to monitor.

On the Dashboards page of the Vulnerability Manager Workspace, you can view the dashboards in the Next Experience UI and use these dashboards to track and analyze the vulnerabilities.

Identify users for automatic email reminders sent to users in the Remediation Owner user group.

From the Vulnerability Manager Workspace, vulnerability managers and analysts can request exceptions and false positives for a remediation task (VUL, AVUL, CVUL or CRG) and record (VIT, CVIT, AVIT or CTR). You can also split a remediation task and create change requests.

The following table shows the fields on the Generate remediation digest form.

The following table shows the field descriptions for the GRC request exception form.

The states of records and their associated remediation tasks (RTs) are impacted if records are deferred, resolved, reopened, and transferred to other remediation efforts (REs).

When Vulnerability managers and analysts create remediation efforts (REs), remediation Tasks (VUL, AVUL, CVUL, and CRG) are automatically assigned to IT teams for remediation.

To verify that your remediation tasks and records have been resolved between scheduled scanning cycles, initiate rescans from your ServiceNow AI Platform on-demand.

You can transfer records from existing remediation efforts into new remediation efforts in the Vulnerability Manager Workspace.

The List view in the Vulnerability Manager Workspace permits vulnerability and security managers and analysts to view remediation progress on records, drill down into Vulnerability Response records, and view the status of their approval requests and exceptions.

On the Watch Topics page of Vulnerability Manager Workspace, you can create watch topics that are categorized into four modules, Host Vulnerabilities, Container Vulnerabilities, Application Vulnerabilities, and Configuration Test Results. The related items tabs in a watch topic differ for each module.

Use watch topics in the Vulnerability Manager Workspace to view vulnerabilities and misconfigurations that are filtered from your imported data from the criteria that you set. Use this information to determine how the vulnerabilities and misconfigurations in each watch topic can impact your environment.

The Vulnerability Manager Workspace enables vulnerability managers and analysts to monitor the vulnerabilities and misconfigurations that they care the most about and decide strategically which vulnerabilities they send to IT teams to fix.