Restrict or enable risk change for a CVE or TPE

---
title: Restrict or enable risk change for a CVE or TPE
description: As a Vulnerability Manager and Analyst, you can restrict or enable risk change for the host vulnerabilities associated with a Common Vulnerability Entry \(CVE\) or Third-party Entry \(TPE\) in the Vulnerability Manager Workspace.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/disable-risk-reduction.html
release: brazil
product: Vulnerability Manager Workspace
classification: vulnerability-manager-workspace
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Add a compensating control to the library, Monitoring and managing vulnerable items and test results in the Vulnerability Manager Workspace, Vulnerability Manager Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Restrict or enable risk change for a CVE or TPE

As a Vulnerability Manager and Analyst, you can restrict or enable risk change for the host vulnerabilities associated with a Common Vulnerability Entry \(CVE\) or Third-party Entry \(TPE\) in the Vulnerability Manager Workspace.

## Before you begin

Role required: admin

## About this task

Risk change is enabled by default for a CVE and TPE.

**Note:** The compensating controls feature is available for host vulnerabilities only.

## Procedure

1.  Navigate to **Workspaces** > **Vulnerability Manager Workspace**.

    On the Lists page, under Libraries, open one of the following for which you want to restrict risk change:

    -   **CVE** from the CVEs list.
    -   **TPEs** from the TPEs list.
2.  Select **Restrict risk change**.

    Risk change is restricted for the host vulnerable items related to this CVE or TPE. If other CVEs or TPEs in the same remediation task or Bulk Edit selection remain eligible, the remediation owner can still request risk change for those items. The Request Exception form and the Bulk Edit modal show how many of the selected items are eligible for risk change.

3.  To enable risk change for host vulnerable items, select **Enable risk change**.


**Parent Topic:**[Add a compensating control to the library](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-manager-workspace/create-compensatory-control.md)

**Related topics**  


[Understanding compensating controls for risk reduction](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-manager-workspace/compensating-controls-overview.md)

[Add a compensating control to the library](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-manager-workspace/create-compensatory-control.md)

[Impact of the compensating controls on risk score and expiration date](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-manager-workspace/requesting-approving-risk-reduction.md)