Exploring vulnerability assessment

concept brazil Updated Sep 10, 2026 3 min read vr-ws-vuln-assessment.md

The Vulnerability Assessment Workspace is designed for the Vulnerability Event Manager to create a vulnerability event and to perform vulnerability assessment, especially during the zero-day vulnerability analysis.

You can use the vulnerability assessment workspace to manage critical vulnerabilities, such as:

Zero-day vulnerabilities of critical or high severity
New threat intel identified for a vulnerability
Rapid exploitation of a vulnerability of critical or high severity.

Vulnerability Assessment Workspace and Vulnerability Crisis Management

As a vulnerability event manager, identify and create a vulnerability event record for vulnerabilities of interest. Once you create the vulnerable event, you can perform risk assessment, manually update the risk attributes, and calculate the risk score automatically. Using the Vulnerability Assessment Workspace, you can perform the following actions to handle vulnerability crisis event from inception to resolution.

Prerequisites for vulnerability assessment

Application	Version
Vulnerability Crisis Management plugin	1.0
Vulnerability Response	20.0
Vulnerability Response with NVDNote: For more information, see National Vulnerability Database (NVD) integration.	1.4.2
Vulnerability Response Integration with CISA	1.2
Data Model for SBOM	1.1.2
Software Bill of Materials Core	2.0.2
Software Asset Management	Basic Software Asset Management or Software Asset Management Professional plugin
Major Security Incident Management	2.2.5

## Scheduled jobs

The following are the scheduled jobs.

Scheduled job name	Description
Vulnerability Assessment	Updates the affected configuration items table and the source of the CI if vulnerable items (VITs or AVITs) are created after the assessment.Note: This scheduled job runs daily. It runs for a longer period than the other scheduled jobs.

**Related topics**

Vulnerability Crisis Management

Keywords Vulnerability assessmentVulnerability Crisis Management in the Vulnerability Assessment WorkspacePrerequisites for vulnerability assessmentVulnerability Crisis Management pluginRisk assessment

140 lines · 5.4 KB Wrap lines

---
title: Exploring vulnerability assessment
description: The Vulnerability Assessment Workspace is designed for the Vulnerability Event Manager to create a vulnerability event and to perform vulnerability assessment, especially during the zero-day vulnerability analysis.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-vuln-assessment.html
release: brazil
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 3
keywords: [Vulnerability assessment, Vulnerability Crisis Management in the Vulnerability Assessment Workspace, Prerequisites for vulnerability assessment, Vulnerability Crisis Management plugin, Risk assessment]
breadcrumb: [Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Exploring vulnerability assessment

The Vulnerability Assessment Workspace is designed for the Vulnerability Event Manager to create a vulnerability event and to perform vulnerability assessment, especially during the zero-day vulnerability analysis.

You can use the vulnerability assessment workspace to manage critical vulnerabilities, such as:

-   Zero-day vulnerabilities of critical or high severity
-   New threat intel identified for a vulnerability
-   Rapid exploitation of a vulnerability of critical or high severity.

## Vulnerability Assessment Workspace and Vulnerability Crisis Management

As a vulnerability event manager, identify and create a vulnerability event record for vulnerabilities of interest. Once you create the vulnerable event, you can perform risk assessment, manually update the risk attributes, and calculate the risk score automatically. Using the Vulnerability Assessment Workspace, you can perform the following actions to handle vulnerability crisis event from inception to resolution.

-   [Create a vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/create-vuln-assessment.md)
-   [Modify the vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/modify-vuln-assessment-record.md)
-   [Perform a vulnerability assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/perform-initial-assesment.md)
-   [Review the Assessment details](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/vr-va-ws-assessment-tab.md)
-   [Assign a priority and exposure level to the vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/assign-priority-exposure-level-vr-va-ws.md)
-   [Add affected CIs to the assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/add-affected-ci-vr-vuln-assess-ws.md)
-   [Create vulnerable items for the affected CI or affected software component](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/vr-va-ws-create-vi.md)
-   [Link the vulnerability assessment record to major security incident in Major Security Incident Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/link-vuln-assessment-msim-vr-va-ws.md)

## Prerequisites for vulnerability assessment

<table id="table_qqv_drb_2yb"><thead><tr><th>

Application

</th><th>

Version

</th></tr></thead><tbody><tr><td>

Vulnerability Crisis Management plugin

</td><td>

1.0

</td></tr><tr><td>

Vulnerability Response

</td><td>

20.0

</td></tr><tr><td>

Vulnerability Response with NVD**Note:** For more information, see [National Vulnerability Database \(NVD\) integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/nvd-vuln-integration.md).

</td><td>

1.4.2

</td></tr><tr><td>

Vulnerability Response Integration with CISA

</td><td>

1.2

</td></tr><tr><td>

Data Model for SBOM

</td><td>

1.1.2

</td></tr><tr><td>

Software Bill of Materials Core

</td><td>

2.0.2

</td></tr><tr><td>

Software Asset Management

</td><td>

Basic Software Asset Management or Software Asset Management Professional plugin

</td></tr><tr><td>

Major Security Incident Management

</td><td>

2.2.5

</td></tr></tbody>
</table>## Scheduled jobs

The following are the scheduled jobs.

<table id="table_nyp_1kk_cyb"><thead><tr><th>

Scheduled job name

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Vulnerability Assessment

</td><td>

Updates the affected configuration items table and the source of the CI if vulnerable items \(VITs or AVITs\) are created after the assessment.**Note:** This scheduled job runs daily. It runs for a longer period than the other scheduled jobs.

</td></tr></tbody>
</table>**Related topics**  


[Vulnerability Crisis Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/vulnerability-crisis-management.md)