Vulnerability Response for Microsoft Defender for IoT \(On-premises Management Console\)

The Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console) uses data imported from Microsoft Defender for IoT (On-premises Management Console) to enable risk-based action with the production process context.

Use the Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console) application to track, prioritize, and resolve vulnerabilities on devices used in the production process.

Key Features

Import CVEs associated with OT devices from Microsoft Defender for IoT (On-Premises Management Console) and create vulnerable items (VITs) to provide a single view of OT devices vulnerability data with production process context.
Run imports of newly detected vulnerabilities automatically on your own schedule.
Using assignment rules for VITs can be automatically routed for remediation to local site-based teams to take risk-based action.
Install the Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console)
You can install the Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console) if you have the admin role. The application includes installs related ServiceNow® Store applications and plugins if they are not already installed.
Assign Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console) roles
Assign roles to your users so that you can control their access to the features, capabilities, and data in the Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console) application.
Run the National Vulnerability Database integration
Run the National Vulnerability Database (NVD) integration to import data from the National Institute of Standards and Technology (NIST) NVD product. Running the NVD integration helps you determine the severity and details of Common Vulnerabilities and Exposures (CVEs) found in your environment.
Configure the Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console)
Configure the record for the Vulnerability Response for Microsoft Defender for IoT (On-premises Management Console) integration.
Configure import schedules
Configure the import schedules to access the Microsoft Defender for IoT records.
Configure the system ID of the OT Vulnerability Response integration
Configure the system ID to import integration records fully after the Microsoft SGC Connections integration.
Configure Auto-Close Stale Detections
Enable Auto-Close Stale Detections to automatically close stale vulnerable detections not recently found by your third-party integrations.

Parent Topic:Operational Technology Vulnerability Response Integrations

title	Vulnerability Response for Microsoft Defender for IoT \(On-premises Management Console\)
description	The Vulnerability Response for Microsoft Defender for IoT \(On-premises Management Console\) uses data imported from Microsoft Defender for IoT \(On-premises Management Console\) to enable risk-based action with the production process context.
locale	en-US
canonical_url	https://www.servicenow.com/docs/r/operational-technology/operational-technology-vulnerability-response/vulnerability-response-integration-with-microsoft-defender-for-iot.html
release	brazil
product	Operational Technology Vulnerability Response
classification	operational-technology-vulnerability-response
topic_type	concept
last_updated	2026-09-10
reading_time_minutes	1
breadcrumb	IntegrateOperational Technology Vulnerability ResponseOperational Technology