---
title: Assign vulnerable items to groups
description: Configure OT Vulnerability assignment rules.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/operational-technology/operational-technology-vulnerability-response/assign-vulnerable-items-to-groups.html
release: australia
product: Operational Technology Vulnerability Response
classification: operational-technology-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Configure, Operational Technology Vulnerability Response, Operational Technology]
---

# Assign vulnerable items to groups

Configure OT Vulnerability assignment rules.

## Before you begin

OT Vulnerable Items can be assigned to site level groups or groups based on classification, depending on your remediation strategy.

Role required: sn\_sec\_wf.manage\_admin\_rules

## About this task

When Vulnerable Items are imported, they are assigned to the appropriate group based on Vulnerability Assignment Rules. Operational Technology Vulnerability Response ships with one OT vulnerability assignment rule, **Operational Technology \(OT\) assignment rule**, which assigns OT vulnerable item records \(VIT\) to the corresponding OT VR assignment group based on its site. If it does not belong to any site, or if there's no group specified on the site, the rule assigns to the OT VR Default Assignment Group.

For more information about creating Vulnerability Response assignment rules, see [Create or edit Vulnerability Response assignment rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/security-management/create-vul-assign-rules.md).

## Procedure

1.  Navigate to **All** > **Industrial Workspace** > **Guided Setup** > **Operational Technology Vulnerability Response** > **Assignment Rules** > **Configure**.

2.  Alternatively, navigate to **Workspaces** > **Security Exposure Management** > **Administration** > **Assignment**.

3.  In the Assignment list displayed in the Security Exposure Management Workspace, select **Operational Technology \(OT\) assignment rule**.

4.  Configure it based on your remediation strategy:

    -   If your remediation strategy is to assign all OT Vulnerable Items to the site, set the execution order of the OT VR Assignment rule to be less than all other rules.
    -   If your strategy is to assign by class and then assign to sites for all other classes, set the execution order of the OT VR Assignment Rule to be greater than all class-based rules.
5.  Once the execution order is updated, set the OT VR Assignment Rule Active state to **true**.


## What to do next

[Configure OT remediation target rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/operational-technology-vulnerability-response/calculate-remediation-target-date.md).

**Parent Topic:**[Configuring Operational Technology Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/operational-technology-vulnerability-response/configuring-oper-tech-vulnerability-response.md)