Product documentation Docs
    • English
    • Deutsch
    • 日本語
    • 한국어
    • Français
  • More Sites
    • Now Community
    • Developer Site
    • Knowledge Base
    • Product Information
    • ServiceNow.com
    • Training
    • Customer Success Center
    • ServiceNow Support Videos
  • Log in

Product documentation

  • Home
How search works:
  • Punctuation and capital letters are ignored
  • Special characters like underscores (_) are removed
  • Known synonyms are applied
  • The most relevant topics (based on weighting and matching to search terms) are listed first in search results
Topics are ranked in search results by how closely they match your search terms
  • A match on the entire phrase you typed
  • A match on part of the phrase you typed
  • A match on ALL of the terms in the phrase you typed
  • A match on ANY of the terms in the phrase you typed

Note: Matches in titles are always highly ranked.

  • Release version
    Table of Contents
    • Security Operations
Table of Contents
Choose your release version
    Home Orlando Security Incident Management Security Operations Vulnerability Response Supported applications and setup for Vulnerability Response Optional Vulnerability Response setup tasks Create or edit Vulnerability Response remediation target rules

    Create or edit Vulnerability Response remediation target rules

    • Save as PDF Selected topic Topic & subtopics All topics in contents
    • Unsubscribe Log in to subscribe to topics and get notified when content changes.
    • Share this page

    Create or edit Vulnerability Response remediation target rules

    Vulnerability managers set up a remediation target rule at the vulnerable item level to drive the remediation of high-risk vulnerabilities in a timely manner. When the remediation date for a vulnerable item nears, a notification is sent to the users or groups specified in the rule.

    Before you begin

    Role required: v10.3 sn_vul.vulnerability.admin or sn_vul.admin (deprecated)

    Starting with v10.3, persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

    Procedure

    1. Navigate to Vulnerability > Administration > Remediation Target Rules.
    2. Click New.
    3. Fill in the fields on the form, as appropriate.
      Field Description
      Name Name of the rule.
      Target (days) Specify the number of days within which the vulnerable items should be remediated, since first identified.
      Active By default the Active check box is selected, which means the remediation target rule is active. If this check box is cleared, this rule does not apply to new vulnerable items created in the system.
      Notify (days before due) Number of days prior to the targeted remediation time for a notification to be sent. The notification date calculated using this value is used to show the remediation status and color coding. If the date is before the notification date, the remediation status is “In flight.” If it is past the notification date and before the remediation target date, the status is shown as approaching target.
      Note: If this field is set to 0, only a Target Missed notification is sent.
      Rule applies to Using the condition filter, select the criteria for applying the rule to the vulnerable items. To prevent performance impact, test your conditions at full production scale. Testing enables you to determine how long the Evaluate remediation targets job takes to execute, given the conditions and the size of your Configuration Management Database (CMDB).
      Notifications
      Note: The count shown in the notification email does not include vulnerable items in the Deferred, Resolved, or Closed state.
      Users The people to notify when the selected vulnerable item is approaching or passes its targeted remediation target time.
      Group The group to notify when the selected vulnerable item is approaching or passes its targeted remediation target time.
    4. Click Submit.
      This rule goes into effect during the next run of the scheduled job, Evaluate remediation targets or, starting with v12.0, when using the Change Apply button on the Remediation Target Rules list view. The same is true when an existing rule is updated. For more information on the scheduled job, see Vulnerability Response remediation target rules.
      Remediation target rule example

    Tags:

    Feedback
    On this page

    Previous topic

    Next topic

    • Contact Us
    • Careers
    • Terms of Use
    • Privacy Statement
    • Sitemap
    • © ServiceNow. All rights reserved.

    Release version
    Choose your release version

      Create or edit Vulnerability Response remediation target rules

      • Save as PDF Selected topic Topic & subtopics All topics in contents
      • Unsubscribe Log in to subscribe to topics and get notified when content changes.
      • Share this page

      Create or edit Vulnerability Response remediation target rules

      Vulnerability managers set up a remediation target rule at the vulnerable item level to drive the remediation of high-risk vulnerabilities in a timely manner. When the remediation date for a vulnerable item nears, a notification is sent to the users or groups specified in the rule.

      Before you begin

      Role required: v10.3 sn_vul.vulnerability.admin or sn_vul.admin (deprecated)

      Starting with v10.3, persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

      Procedure

      1. Navigate to Vulnerability > Administration > Remediation Target Rules.
      2. Click New.
      3. Fill in the fields on the form, as appropriate.
        Field Description
        Name Name of the rule.
        Target (days) Specify the number of days within which the vulnerable items should be remediated, since first identified.
        Active By default the Active check box is selected, which means the remediation target rule is active. If this check box is cleared, this rule does not apply to new vulnerable items created in the system.
        Notify (days before due) Number of days prior to the targeted remediation time for a notification to be sent. The notification date calculated using this value is used to show the remediation status and color coding. If the date is before the notification date, the remediation status is “In flight.” If it is past the notification date and before the remediation target date, the status is shown as approaching target.
        Note: If this field is set to 0, only a Target Missed notification is sent.
        Rule applies to Using the condition filter, select the criteria for applying the rule to the vulnerable items. To prevent performance impact, test your conditions at full production scale. Testing enables you to determine how long the Evaluate remediation targets job takes to execute, given the conditions and the size of your Configuration Management Database (CMDB).
        Notifications
        Note: The count shown in the notification email does not include vulnerable items in the Deferred, Resolved, or Closed state.
        Users The people to notify when the selected vulnerable item is approaching or passes its targeted remediation target time.
        Group The group to notify when the selected vulnerable item is approaching or passes its targeted remediation target time.
      4. Click Submit.
        This rule goes into effect during the next run of the scheduled job, Evaluate remediation targets or, starting with v12.0, when using the Change Apply button on the Remediation Target Rules list view. The same is true when an existing rule is updated. For more information on the scheduled job, see Vulnerability Response remediation target rules.
        Remediation target rule example

      Tags:

      Feedback

          Share this page

          Got it! Feel free to add a comment
          To share your product suggestions, visit the Idea Portal.
          Please let us know how to improve this content

          Check any that apply

          To share your product suggestions, visit the Idea Portal.
          Confirm

          We were unable to find "Coaching" in Jakarta. Would you like to search instead?

          No Yes
          • Contact Us
          • Careers
          • Terms of Use
          • Privacy Statement
          • Sitemap
          • © ServiceNow. All rights reserved.

          Subscribe Subscribed Unsubscribe Last updated: Tags: January February March April May June July August September October November December No Results Found Versions Search preferences successfully updated My release version successfully updated My release version successfully deleted An error has occurred. Please try again later. You have been unsubscribed from all topics. You are now subscribed to and will receive notifications if any changes are made to this page. You have been unsubscribed from this content Thank you for your feedback. Form temporarily unavailable. Please try again or contact  docfeedback@servicenow.com  to submit your comments. The topic you requested does not exist in the release. You were redirected to a related topic instead. The available release versions for this topic are listed There is no specific version for this documentation. Explore products Click to go to the page. Release notes and upgrades Click to open the dropdown menu. Delete Remove No selected version Reset This field is required You are already subscribed to this topic Attach screenshot The file you uploaded exceeds the allowed file size of 20MB. Please try again with a smaller file. Please complete the reCAPTCHA step to attach a screenshot
          Log in to personalize your search results and subscribe to topics
          No, thanks Login