|
Washington DC
|
No updates for this release.
|
|
Xanadu
|
No updates for this release.
|
|
Yokohama
|
- **[Role configuration required for agentic workflows and AI agents](https://www.servicenow.com/docs/access?context=aia-role-masking&family=yokohama&ft:locale=en-US)**
Agentic workflows and AI agents included with Now Assist applications require additional security configuration. If you select **Users with selected roles** for your user access security controls for an agentic workflow or AI agent, you must add the installed roles, or they will not execute. Data access settings must also include these roles. See the documentation for the agentic workflow or AI agent for the specific roles you must add.
- **[Some Now Assist skills are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=yokohama&ft:locale=en-US)**
The new default behavior works as follows:
- New customers: When you install a Now Assist product, designated skills are turned on automatically.
- Existing customers who are upgrading \(starting with Yokohama Patch 11\): Any previously unconfigured skill is turned on automatically \(the skill was never configured and turned on, then turned off again\). Previously configured skills that were turned on, then off, remain inactive.
- **[Use Now Assist for Vulnerability Response in Security Posture Control](https://www.servicenow.com/docs/access?context=using-now-assist-api-connector&family=yokohama&ft:locale=en-US)**
You have the option to use Now Assist to help you automatically complete some of the steps in the Connector builder in the Security Posture Control workspace. Use the Connector builder to create your own service graph connectors for Security Posture Control.
- **[Generate insights to prioritize risks](https://www.servicenow.com/docs/access?context=sem-insights-skill&family=yokohama&ft:locale=en-US)**
Use generative AI to provide contextual summaries, actionable recommendations, and quick links in the Security Exposure Management Workspace, helping you prioritize critical risks and accelerate remediation.
- **[Generate recommendation for approval impact analysis](https://www.servicenow.com/docs/access?context=sem-approval-recommendation-skill&family=yokohama&ft:locale=en-US)**
Use generative AI to provide on-demand recommendations to approve or reject a request directly from the Exception Change Approval record, enabling approvers to make fast, consistent decisions while reducing manual analysis effort.
- **[Granular roles](https://www.servicenow.com/docs/access?context=now-assist-vr-acticvate-agentic-workflow&family=yokohama&ft:locale=en-US)**
The sn\_vul\_ai.write\_rem\_insights and sn\_vul\_ai.read\_rem\_insights granular roles have been added and are inherited by the sn\_vul.vulnerability\_admin and sn\_vul.vulnerability\_analyst roles automatically. These roles provide you with more control over read and write access for the records on the Remediation Compliance Insights \[sn\_vul\_ai\_remediation\_insights\] caching table. The VR.System role also inherits these granular roles so background job execution for the workflow can occur.
- **[Identify duplicate vulnerable items](https://www.servicenow.com/docs/access?context=dedupe-host-vi-now-assist-vulnerability-response&family=yokohama&ft:locale=en-US)**
Use generative AI to identify duplicates for your active host vulnerable items that are imported by your vulnerability scanners. Use generative AI reasoning with Now Assist to help your analysts differentiate between primary vulnerability items \(VITs\) and those VITs that are duplicates. Close duplicate VITs and move their associated detections automatically to the primary VIT records.
- **[Suggest vulnerability solutions](https://www.servicenow.com/docs/access?context=solutions-now-assist-vulnerability-response&family=yokohama&ft:locale=en-US)**
Use generative AI to analyze available remediation options pulled from integrated third-party products like Red Hat, Tenable for Vulnerability Response, or internal solution management systems. Evaluate each option against the specific configuration item context, for example, the OS version or software version, and get recommendations for the most viable fix for implementation.
- ****
- **[Use agentic workflows](https://www.servicenow.com/docs/access?context=using-now-assist-ai-agents-vr&family=yokohama&ft:locale=en-US)**
The Assess vulnerability exposure agentic workflow enables vulnerability managers to determine your exposure to vulnerabilities.
- Determine your exposure to the most current Cybersecurity and Infrastructure Security Agency \(CISA\) known vulnerabilities in your environment and assess their potential impact to your configuration items \(CIs\) and business services.
- Identify assets with Common Vulnerabilities and Exposures \(CVEs\).
- Determine the number of active vulnerability items \(VITs\) that correspond to CVEs. Create watch topics for VIT remediation.
The Analyze vulnerability remediation status agentic workflow enables vulnerability managers to monitor and assess remediation target compliance.
- Track Service Level Agreement \(SLA\) compliance - Understand how effectively your organization is meeting remediation goals for vulnerabilities based on your SLAs.
- Analyze missed SLAs by severity, assignment group, and configuration item \(CI\) class - Pinpoint gaps in remediation by categorizing overdue VITs based on severity, assignment groups, and CI classes to enable targeted interventions and smarter resource allocation.
|
|
Zurich
|
- **[Retrieve Vulnerability Response data](https://www.servicenow.com/docs/access?context=retrieve-vr-data&family=zurich&ft:locale=en-US)**
Chat with an AI agent using natural language to retrieve host \(Vulnerability Response\) and Application Vulnerability Response \(AVR\) data in the Unified Security Exposure Management \(USEM\) and legacy Vulnerability Response workspaces.
- **[Role configuration required for agentic workflows and AI agents](https://www.servicenow.com/docs/access?context=aia-role-masking&family=zurich&ft:locale=en-US)**
Agentic workflows and AI agents included with Now Assist applications require additional security configuration. If you select **Users with selected roles** for your user access security controls for an agentic workflow or AI agent, you must add the installed roles, or they won't execute. Data access settings must also include these roles. See the documentation for the agentic workflow or AI agent for the specific roles you must add. After the roles are configured, users must have the specified role to invoke the agentic workflow or AI agent.
- **[Create a custom API service graph connector in the Security Posture Control \(SPC\) workspace](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=zurich&ft:locale=en-US)**
Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the SPC workspace. With a Now Assist skill that is included with the Now Assist for Vulnerability Response application, your developers have the option to automate steps in the Connector builder framework.
- Automate the steps for selecting API templates, populating request and header parameters, and response field mapping.
- Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment.
- Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build.
See [Creating your own API connector](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=zurich&ft:locale=en-US) for more information and the required applications.
- **[Generate insights to prioritize risks](https://www.servicenow.com/docs/access?context=sem-insights-skill&family=zurich&ft:locale=en-US)**
Use generative AI to provide contextual summaries, actionable recommendations, and quick links in the Security Exposure Management Workspace, helping you prioritize critical risks and accelerate remediation.
- **[Generate recommendation for approval impact analysis](https://www.servicenow.com/docs/access?context=sem-approval-recommendation-skill&family=zurich&ft:locale=en-US)**
Use generative AI to provide on-demand recommendations to approve or reject a request directly from the Exception Change Approval record, enabling approvers to make fast, consistent decisions while reducing manual analysis effort.
- **[Granular roles](https://www.servicenow.com/docs/access?context=now-assist-vr-acticvate-agentic-workflow&family=zurich&ft:locale=en-US)**
The sn\_vul\_ai.write\_rem\_insights and sn\_vul\_ai.read\_rem\_insights granular roles have been added and are inherited by the sn\_vul.vulnerability\_admin and sn\_vul.vulnerability\_analyst roles automatically. These roles provide you with more control over read and write access for the records on the Remediation Compliance Insights \[sn\_vul\_ai\_remediation\_insights\] caching table. The VR.System role also inherits these granular roles so background job execution for the workflow can occur.
- **[Identify duplicate vulnerable items](https://www.servicenow.com/docs/access?context=dedupe-host-vi-now-assist-vulnerability-response&family=zurich&ft:locale=en-US)**
Use generative AI to identify duplicates for your active host vulnerable items that are imported by your vulnerability scanners. Use generative AI reasoning with Now Assist to help your analysts differentiate between primary vulnerability items \(VITs\) and those VITs that are duplicates. Close duplicate VITs and move their associated detections automatically to the primary VIT records.
- **[Identify preferred vulnerability solutions with Now Assist for Vulnerability Response](https://www.servicenow.com/docs/access?context=solutions-now-assist-vulnerability-response&family=zurich&ft:locale=en-US)**
Use generative AI to analyze available remediation options pulled from integrated third-party products like Red Hat, Tenable for Vulnerability Response, or internal solution management systems. Evaluate each option against the specific configuration item context, for example, the OS version or software version, and get recommendations for the most viable fix for implementation.
- **[Use agentic workflows](https://www.servicenow.com/docs/access?context=using-now-assist-ai-agents-vr&family=zurich&ft:locale=en-US)**
The assess vulnerability exposure agentic workflow enables vulnerability managers to determine your exposure to vulnerabilities.
- Determine your exposure to the most current Cybersecurity and Infrastructure Security Agency \(CISA\) known vulnerabilities in your environment and assess their potential impact to your configuration items \(CIs\) and business services.
- Identify assets with Common Vulnerabilities and Exposures \(CVEs\).
- Determine the number of active VITs that correspond to CVEs. Create watch topics for VIT remediation.
The analyze vulnerability remediation status agentic workflow helps vulnerability managers to monitor and assess remediation target compliance.
- Track Service Level Agreement \(SLA\) compliance - Understand how effectively your organization is meeting remediation goals for vulnerabilities based on your SLAs.
- Analyze missed SLAs by severity, assignment group, and configuration item \(CI\) class - Pinpoint gaps in remediation by categorizing overdue VITs based on severity, assignment groups, and CI classes to enable targeted interventions and smarter resource allocation.
|
|
Australia
|
No updates for this release.
|