Configure questionnaire for risk reduction

---
title: Configure questionnaire for risk reduction
description: Starting with Vulnerability Response v20.0, you can customize risk reduction request's questionnaire for a set of filtered vulnerable items or remediation tasks.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/configure-approval-rules-risk-reduction.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Additional Vulnerability Response setup and configuration tasks, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Configure questionnaire for risk reduction

Starting with Vulnerability Response v20.0, you can customize risk reduction request's questionnaire for a set of filtered vulnerable items or remediation tasks.

## Before you begin

Role required: admin

## About this task

The **Questionnaire for compensating controls for vulnerable items** and **Questionnaire for compensating controls for vulnerable group** approval rules are shipped with the base system.

## Procedure

1.  Navigate to **All** > **Vulnerability Response** > **Administration** > **Exception Management**.

2.  On the Settings for VR Exception Management form, select the Enable questionnaire to request exception check box.

3.  To configure questionnaires based on conditions for risk reduction requests:

    1.  In the VR Questionnaire Configuration section, select **New**.

    2.  On the Questionnaire Configuration - New Record form, select the **Questionnaire for compensating controls for vulnerable groups** or **Questionnaire for compensating controls for vulnerable items** approval rule and provide the condition.

    3.  Select the desired questionnaire and select **Submit**.

        For more information on the Questionnaire Configuration form fields, see [Questionnaire Configuration form fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/compensating-controls-approval-rule-new-record-form.md).

        The created questionnaire appears in the VR Questionnaire Configuration section of the Settings for VR Exception Management form.

4.  Select **Save** on the Settings for VR Exception Management form.