---
title: Configure OT vulnerability risk rollup calculator
description: Use the OT vulnerability risk rollup calculator to calculate the risk score of the OT devices at each level of the equipment model. The overall risk score is rolled up to the parent equipment model entity.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/operational-technology/operational-technology-vulnerability-response/configure-risk-rollup-calculator.html
release: australia
product: Operational Technology Vulnerability Response
classification: operational-technology-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 3
breadcrumb: [Configure, Operational Technology Vulnerability Response, Operational Technology]
---

# Configure OT vulnerability risk rollup calculator

Use the OT vulnerability risk rollup calculator to calculate the risk score of the OT devices at each level of the equipment model. The overall risk score is rolled up to the parent equipment model entity.

## Before you begin

-   Calculate the risk score for all the equipment model entities by executing the scheduled job.

    **Note:** The risk score calculation for all the equipment model entities is only for the subsequent run of the daily schedule job.

-   Check that the Service Populator column in the Equipment Model Entities list is set to **OTDynamicManualServicePopulator** by navigating to **All** > **Equipment Model - ISA** > **Equipment Model Entities**. If it's set to other values, you must execute the **Update ISA entity service populator** on-demand job:

    -   Navigate to **All** > **System Definition** > **Scheduled Jobs**.
    -   Select the **Update ISA entity service populator** job.
    -   Select **Execute Now**.
    **Note:** If you don't see the Service Populator column in the Equipment Model Entities list, you can add it by personalizing the list. For more information, see [Personalize a list](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-user-interface/c_PersonalLists.md).

-   Role required: admin or sn\_vul.manage\_risk\_score\_configuration

## About this task

For this step, refer to the Vulnerability Rollup Calculators with OT vulnerability calculator shipped with the Operational Technology Vulnerability Response application demo data.

For more information, see [Vulnerability Response Rollup Calculators](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/security-management/vuln-rollup-calculator.md).

To calculate the risk score for the equipment model entity, set up the weights for these fields:

-   Maximum risk score of the Vulnerable Items \(VITs\) associated to the equipment model entity.
-   Average risk score of the VITs associated to the equipment model entity.
-   Number of vulnerable items per equipment model entity.

## Procedure

1.  Navigate to **All** > **Vulnerability Response** > **Administration** > **Vulnerability Rollup Calculator**.

2.  Navigate to **Workspaces** > **Security Exposure Management** > **Roll-up**.

3.  From the Roll-up calculators list, select **Equipment Model Entity Rollup**.

4.  If required, in the Roll-up weightage section, update the weight for each criterion.

5.  Select **Update**.


## What to do next

Now, you can calculate the risk associated at a level for your equipment model entities.

1.  Navigate to **All** > **Industrial Workspace Admin** > **Guided Setup** > **Operational Technology Vulnerability Response** > **OT Vulnerabilities Dashboard Risk Rollup**.
2.  Calculate the risk rollup for all equipment model entities:
    1.  Select **Configure** for the Risk roll-up configuration task.
    2.  In the Security Exposure Management Workspace, follow the steps described in the Help Center for this section.
3.  Configure the **Risk Rollup for VITs by Equipment Model Entity** scheduled job:
    1.  Select **Configure** for the Daily Schedule job for risk roll up task.
    2.  Security Exposure Management Workspace, follow the steps described in the Help Center for this section.

        **Note:** By default, the job is set to run daily. You can change this to fit your business needs by editing the **Run**, **Time zone**, and **Time** fields.

4.  To avoid getting the wrong risk score and rating for remediation tasks, change the **Table** field in the **OT Devices with No sites Assigned Rollup** record:
    1.  Navigate to **All** > **System Definition** > **Scripts - Background**.
    2.  In the **Run script** field, add the following script.

        ```
        var gr = new GlideRecord('sn_vul_rollup');
        
        gr.get('sys_id','24973dc4939e42900b1566f4548918eb');
        
        gr.table = 'sn_ot_metric';
        
        gr.update();
        ```

    3.  Select **Run script**.
    4.  To check the value of the **Table** field in the **OT Devices with No sites Assigned Rollup** record and run the scheduled job, navigate to **All** > **Vulnerability Response** > **Administration** > **Vulnerability Rollup Calculator**.
    5.  Select the **OT Devices with No sites Assigned Rollup** record.
    6.  Ensure that the **Table** field is set to **OT Metric \[sn\_ot\_metric\]**.
    7.  Run the scheduled job.

        After running the job, the correct VIT risk scores and ratings are rolled up to the remediation tasks.

5.  Configure the entities for risk score roll-up:
    1.  Select **Configure** for the Set All Entities for Risk score Roll-Up Job task.
    2.  Security Exposure Management Workspace, follow the steps described in the Help Center.

**Parent Topic:**[Configuring Operational Technology Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/operational-technology-vulnerability-response/configuring-oper-tech-vulnerability-response.md)