The ServiceNow Operational Technology Vulnerability Response application enables industrial process organizations to prioritize Operational Technology (OT) vulnerabilities at a site level, aggregate OT vulnerability data, and take risk-based actions.
- Import vulnerable items from “ServiceNow Operational Technology (OT) Certified” integrations and create a single view of OT device vulnerability data with production process context.
- Use additional OT-specific factors such as Production Process Criticality and Purdue Level to calculate risk for OT vulnerabilities.
- Use site-specific assignment rules to route the vulnerable items for remediation to the local teams who will take action.
- Use OT specific risk scores to help OT Remediation Owners prioritize and remediate vulnerable items.
- Ability to consolidate risk across IT and OT environments, and report OT risk at a site level.
New
Operational Technology Vulnerability Response version 30.0.2 supports the Security Exposure Management Workspace (SEM Workspace) as Vulnerability Response apps are consolidated under Unified Security Exposure Management (USEM) from version 30.0.2.
If you are using Operational Technology Vulnerability Response 30.0.2, you must upgrade to USEM using the Migration Assistance Tool to ensure a safe and successful upgrade. For full details, please refer to the KB2556844 and documentation before proceeding.
- CMDB CI Class Models
- Vulnerability Response
- Operational Technology Manager
- Industrial Process Manager