The ServiceNow® Configuration Compliance application enables you to prioritize and remediate the most critical configuration-related vulnerabilities in your environment quickly and efficiently. Configuration Compliance was enhanced and updated in the Vancouver release.

Configuration Compliance highlights for the Vancouver release

  • Starting with version 14.9, test result group has been renamed to remediation task. Group rules have been renamed to remediation task rules.
  • Use Configuration Compliance in Vulnerability Response Workspaces.
  • Use the Configuration Compliance [PA] dashboard to view the data in the Next Experience framework.

See Configuration Compliance for more information.

Important: Configuration Compliance is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.

New in the Vancouver release

Comprehensive Assessment Integration for Microsoft Defender for Cloud Integration
Use the Comprehensive Assessment Integration to pull all the test results that didn't pass in the past seven days.
Qualys PC Comprehensive Results for Qualys Integration for Security Operations
Use the schedule job, Qualys PC Comprehensive Results, to retrieve the compliance posture records from Qualys. These records are based on the last evaluation date that the test results didn't pass.
Fetching the last pass date for test results
Fetch the latest pass date for the test results that display in the Last pass field.
Viewing the dashboards in the Vulnerability Manager Workspace
Starting from version 14.9.2 of Configuration Compliance, the Configuration Compliance dashboard is available in the Next Experience UI from Vulnerability Manager workspace.
Extension of deferred test result group before the due date
Starting with version 14.9.2 of Vulnerability Response, you can request an extension for a deferred test result group before the due date.
Extension of deferred exception rule before the due date
Starting with version 14.9.2 of Vulnerability Response, you can request an extension for a deferred test result group before the due date.
Quick start tests for Configuration Compliance

After upgrades and deployments of the new applications or integrations, run the quick start tests to verify that Configuration Compliance works as expected. If you customized Configuration Compliance, copy the quick start tests and configure them for your customizations.

Activation information

Install Configuration Compliance by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.