|
Washington DC
|
- **[OT Vulnerability Remediation Owner \(sn\_otvr.remediation\_owner\) role](https://www.servicenow.com/docs/access?context=components-installed-with-operational-technology-vulnerability-response&family=washingtondc&ft:locale=en-US)**
Assign the OT Vulnerability Remediation Owner \(sn\_otvr.remediation\_owner\) role to users who primarily work on an assigned remediation task and can create change tasks when needed. The OT Vulnerability Remediation Owner role contains the following roles:
- cmdb\_ot\_isa\_viewer
- cmdb\_ot\_viewer
- sn\_vul.close\_vi\_vg
- sn\_vul.remediation\_owner
- **[Automatically set a start time for a remediation task based on the ISA maintenance schedule](https://www.servicenow.com/docs/access?context=create-remediation-task&family=washingtondc&ft:locale=en-US)**
Start a remediation task automatically based on the ISA maintenance schedule. After you create the remediation task, it’s picked up during the next scheduled maintenance.
- **[View unmapped devices and devices not assigned to a site in the OT Vulnerabilities tab of the OT Manager dashboard](https://www.servicenow.com/docs/access?context=ot-manager-dashboard&family=washingtondc&ft:locale=en-US)**
View the unmapped OT devices and OT devices that aren't assigned to a site in the **No Site Assigned** table included in the **Vulnerability Risk** widget.
- **[Common Security Advisory Framework \(CSAF\) supported for Operational Technology Vulnerability Response](https://www.servicenow.com/docs/access?context=csaf-overview&family=washingtondc&ft:locale=en-US)**
Use the Common Security Advisory Framework \(CSAF\) with multiple vendor support when importing solutions from Aggregators or Trusted Providers.
- **[OTVR \(PA\) dashboard Guided Setup](https://www.servicenow.com/docs/access?context=setting-up-the-otvr-pa-dashboard&family=washingtondc&ft:locale=en-US)**
Use the OTVR \(PA\) dashboard Guided Setup under the Operational Technology Vulnerability Response section in the Industrial Workspace Guided Setup to configure data collection and review indicator sources.
- **[Change the Operational Technology Vulnerability Response \(OT VR\) assignment group field in a bulk edit](https://www.servicenow.com/docs/access?context=bulk-edit-assignment-group-otvr&family=washingtondc&ft:locale=en-US)**
Use the bulk edit feature to update the **OT VR assignment group** field in multiple site records at once.
- **[Use compensating controls for Operational Technology](https://www.servicenow.com/docs/access?context=compensating-controls-for-ot&family=washingtondc&ft:locale=en-US)**
Use compensating controls for OT to reduce vulnerability risks that can't be patched immediately. Compensating controls help mitigate risks.
- **[OT Vulnerabilities tab](https://www.servicenow.com/docs/access?context=ot-manager-dashboard&family=washingtondc&ft:locale=en-US)**
Track your OT vulnerability data with multi-site and business unit filtering by using the **OT Vulnerabilities** tab in the Industrial Workspace. This tab now runs in Performance Analytics.
- **[Implementing multi-site and business unit filtering in the OT Vulnerabilities tab](https://www.servicenow.com/docs/access?context=ot-devices-dashboard-filters-vr&family=washingtondc&ft:locale=en-US)**
Filter the data based on the specific business units and sites by using the business unit and site filters in the **OT Vulnerabilities** tab.
- **[Operational Technology Vulnerability Response \(PA\) dashboard](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=washingtondc&ft:locale=en-US)**
Track the volume, performance, and progress of the OT vulnerable items \(VIs\) from the initial analysis and detection to the containment, or remediation, for a VI by using the Operational Technology Vulnerability Response \(PA\) dashboard.
|
|
Xanadu
|
- **[Hardware Vulnerability Assessment menu in the Industrial Workspace](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&family=xanadu&ft:locale=en-US)**
Automatically and periodically assess the OT device firmware vulnerabilities that are in your inventory and create vulnerable items against the impacted assets \(CI\).
- **[Risk scores on the OT Vulnerability Risk Rollup dashboard](https://www.servicenow.com/docs/access?context=ot-risk-rollup-dashboard&family=xanadu&ft:locale=en-US)**
View a table of risk scores for your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard.
- **[Enhanced OTVR \(PA\) dashboard experience](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=xanadu&ft:locale=en-US)**
View and manage all of your OT vulnerability data and data visualizations in a centralized location with the enhanced OTVR \(PA\) dashboard, which is accessible on the Dashboard Library page.
- **[OT Vulnerability Remediation Owner \(sn\_otvr.remediation\_owner\) role](https://www.servicenow.com/docs/access?context=components-installed-with-operational-technology-vulnerability-response&family=xanadu&ft:locale=en-US)**
Assign the OT Vulnerability Remediation Owner \(sn\_otvr.remediation\_owner\) role to users who primarily work on an assigned remediation task and can create change tasks when needed. The OT Vulnerability Remediation Owner role contains the following roles:
- cmdb\_ot\_isa\_viewer
- cmdb\_ot\_viewer
- sn\_vul.close\_vi\_vg
- sn\_vul.remediation\_owner
- **[Automatically set a start time for a remediation task based on the ISA maintenance schedule](https://www.servicenow.com/docs/access?context=create-remediation-task&family=xanadu&ft:locale=en-US)**
Start a remediation task automatically based on the ISA maintenance schedule. After you create the remediation task, it’s picked up during the next scheduled maintenance.
- **[Common Security Advisory Framework \(CSAF\) supported for Operational Technology Vulnerability Response](https://www.servicenow.com/docs/access?context=csaf-overview&family=xanadu&ft:locale=en-US)**
Use the Common Security Advisory Framework \(CSAF\) with multiple vendor support when importing solutions from Aggregators or Trusted Providers.
- **[OTVR \(PA\) dashboard Guided Setup](https://www.servicenow.com/docs/access?context=setting-up-the-otvr-pa-dashboard&family=xanadu&ft:locale=en-US)**
Use the OTVR \(PA\) dashboard Guided Setup under the Operational Technology Vulnerability Response section in the Industrial Workspace Guided Setup to configure data collection and review indicator sources.
- **[Change the Operational Technology Vulnerability Response \(OT VR\) assignment group field in a bulk edit](https://www.servicenow.com/docs/access?context=bulk-edit-assignment-group-otvr&family=xanadu&ft:locale=en-US)**
Use the bulk edit feature to update the **OT VR assignment group** field in multiple site records at once.
- **[Use compensating controls for Operational Technology](https://www.servicenow.com/docs/access?context=compensating-controls-for-ot&family=xanadu&ft:locale=en-US)**
Use compensating controls for OT to reduce vulnerability risks that can't be patched immediately. Compensating controls help mitigate risks.
|
|
Yokohama
|
- **[Configuring Operational Technology Vulnerability Response from the SEM Workspace](https://www.servicenow.com/docs/access?context=configuring-oper-tech-vulnerability-response&family=yokohama&ft:locale=en-US)**
Starting from Operational Technology Vulnerability Response version 30.0.x, users may be redirected to the Unified Security Exposure Management \(USEM\) Workspace to perform some configuration tasks. The Vulnerability Response plugin is consolidated under USEM from version 30.0.x.
- **[Demo data not required for Operational Technology Risk Calculator plugin](https://www.servicenow.com/docs/access?context=calculate-vulnerability-risk&family=yokohama&ft:locale=en-US)**
You can directly access and use the Operational Technology Vulnerability Response Risk Calculator without loading the demo data while installing the plugin. In previous releases, the risk calculation was included as part of the demo data.
- **[Enhanced features for Hardware Vulnerability Assessment for OT devices](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&family=yokohama&ft:locale=en-US)**
The following enhancements are available in Hardware Vulnerability Assessment:
- Assessments without Normalization: Ability to assess discovery models without content available for normalization.
- Confidence Scores: New scoring mechanism for all types of assessments.
- Version Range Support: The range information provided by the National Vulnerability Database \(NVD\) is used to create assessments without explicitly creating Common Platform Enumeration \(CPEs\) in the NVD.
- Partial assessment for partially normalized discovery model: Creates partial assessments for discovery models without firmware version. The partial assessments are done if the other versions of the discovery model have the same publisher and model.
- Expiring of assessments: If you update the firmware version of a CI, the corresponding normalized discovery model also updates. The assessment records based on the older firmware version expires while new assessments are generated for new firmware version.
- **[Hardware Vulnerability Assessment menu in the Industrial Workspace](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&family=yokohama&ft:locale=en-US)**
Automatically and periodically assess the OT device firmware vulnerabilities that are in your inventory and create vulnerable items against the impacted assets \(CI\).
- **[Vulnerability risk scores on the OT Risk Management dashboard](https://www.servicenow.com/docs/access?context=otvr-risk-management-dashboard&family=yokohama&ft:locale=en-US)**
View a table of vulnerability risk scores for your OT devices at each level of the equipment model with the OT Risk Management dashboard.
- **[Enhanced OTVR \(PA\) dashboard experience](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=yokohama&ft:locale=en-US)**
View and manage all of your OT vulnerability data and data visualizations in a centralized location with the enhanced OTVR \(PA\) dashboard, which is accessible on the Dashboard Library page.
|
|
Zurich
|
- **[Configuring Operational Technology Vulnerability Response from the SEM Workspace](https://www.servicenow.com/docs/access?context=configuring-oper-tech-vulnerability-response&family=zurich&ft:locale=en-US)**
Starting from Operational Technology Vulnerability Response version 30.0.x, users may be redirected to the Unified Security Exposure Management \(USEM\) Workspace to perform some configuration tasks. The Vulnerability Response plugin is consolidated under USEM from version 30.0.x.
- **[Demo data not required for Operational Technology Risk Calculator plugin](https://www.servicenow.com/docs/access?context=calculate-vulnerability-risk&family=zurich&ft:locale=en-US)**
You can directly access and use the Operational Technology Vulnerability Response Risk Calculator without loading the demo data while installing the plugin. In previous releases, the risk calculation was included as part of the demo data.
- **[Enhanced features for Hardware Vulnerability Assessment for OT devices](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&family=zurich&ft:locale=en-US)**
The following enhancements are available in Hardware Vulnerability Assessment:
- Assessments without Normalization: Ability to assess discovery models without content available for normalization.
- Confidence Scores: New scoring mechanism for all types of assessments.
- Version Range Support: The range information provided by the National Vulnerability Database \(NVD\) is used to create assessments without explicitly creating Common Platform Enumeration \(CPEs\) in the NVD.
- Partial assessment for partially normalized discovery model: Creates partial assessments for discovery models without firmware version. The partial assessments are done if the other versions of the discovery model have the same publisher and model.
- Expiring of assessments: If you update the firmware version of a CI, the corresponding normalized discovery model also updates. The assessment records based on the older firmware version expires while new assessments are generated for new firmware version.
- **[Vulnerability risk scores on the OT Risk Management dashboard](https://www.servicenow.com/docs/access?context=otvr-risk-management-dashboard&family=zurich&ft:locale=en-US)**
View a table of vulnerability risk scores for your OT devices at each level of the equipment model with the OT Risk Management dashboard.
|
|
Australia
|
No updates for this release.
|