---
title: Configure OT remediation task rules
description: For remediation tasks that are created in the Industrial Workspace, update existing remediation task rules to prevent imported vulnerable items from automatically adding OT devices.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/operational-technology/operational-technology-vulnerability-response/configure-ot-remediation-task-rules.html
release: australia
product: Operational Technology Vulnerability Response
classification: operational-technology-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Configure, Operational Technology Vulnerability Response, Operational Technology]
---

# Configure OT remediation task rules

For remediation tasks that are created in the Industrial Workspace, update existing remediation task rules to prevent imported vulnerable items from automatically adding OT devices.

## Before you begin

Role required: sn\_sec\_wf.manage\_admin\_rules

When vulnerable items are imported, they can be added to remediation tasks based on configured remediation task rules. If you use Vulnerability Response for both IT and OT networks, you must modify a configuration if you group Vulnerability Items for remediation differently between IT and OT networks. Operational Technology Vulnerability Response provides a sample Remediation Task Rule record that is loaded with demo data to demonstrate how to exclude OT network vulnerabilities from being grouped automatically.

Configure any new or existing Remediation Task Rules based on your remediation strategy:

-   If your remediation strategy is to automatically create remediation tasks only for vulnerabilities within your IT environment, add the following condition to each existing remediation task rule to exclude OT vulnerabilities:
    -   Configuration Item . OT device details = **is empty**
-   If your remediation strategy is to automatically create remediation tasks for all OT vulnerable items, create an appropriate rule.

\[Omitted image "remediation-task-rule.png"\] Alt text: Remediation Task Rule

## Procedure

1.  Navigate to **All** > **Industrial Workspace** > **Guided Setup** > **Operational Technology Vulnerability Response** > **Remediation Task Rules** > **Configure**.

2.  Alternatively, navigate to **Workspaces** > **Security Exposure Management** > **Administration** > **Remediation Task**.

3.  Select the name of the rule you want to update.

    -   Define the rules such that all vulnerable items within a group are remediated by the same team, the same remediation action, and the same timeframe. For example, group by vulnerable item "Assignment group", "Vulnerability", and CI "Used for" \(ex. Production, Staging, Development\) if those environments have different maintenance windows.
    -   For more information about remediation task rules, see [Vulnerability Response Workspaces.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/security-management/vr-ws-overview.md)
    -   For more information about remediation tasks, see [Explore the IT Remediation Workspace.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/security-management/vr-ws-itro-wkspce.md)


**Parent Topic:**[Configuring Operational Technology Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/operational-technology-vulnerability-response/configuring-oper-tech-vulnerability-response.md)