---
title: Assign a priority and exposure level to the vulnerability assessment record
description: Manually assign priority and exposure level to the vulnerability assessment record.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/assign-priority-exposure-level-vr-va-ws.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
keywords: [Assign priority to the vulnerability assessment record, Exposure level to the vulnerability assessment record]
breadcrumb: [Perform an assessment, Exploring vulnerability assessment, Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Assign a priority and exposure level to the vulnerability assessment record

Manually assign priority and exposure level to the vulnerability assessment record.

## Before you begin

Role required: sn\_vul\_analyst.vul\_event\_manager

## Procedure

1.  Navigate to **Workspaces** > **Vulnerability Assessment workspace**.

2.  Select a vulnerability assessment record.

3.  Navigate to **Risk Attributes** in the **Details** tab.

4.  Select a **Priority** from the list of options.

5.  Select an **Exposure Level** from the list of options.

6.  Select **Save**.


## Result

When you update the priority of a vulnerability assessment \(VA\), the system also updates the priority of all associated vulnerable items \(VITs\) and application vulnerable items \(AVITs\).

If a VIT or AVIT is linked to multiple VA records, the system assigns the highest severity \(lowest priority number\) from all linked assessments.

## Example

If a VIT is associated with three VA records with priorities 2, 3, and 4, the system sets the VIT priority to 2 \(High\).

**Note:** This priority roll-down applies only to VITs and AVITs created through SAM NVD assessments or the Vulnerability Assessment Workspace \(Source = ServiceNow VR\). Vulnerable items imported from third-party scanners retain the priority determined by the scanner integration’s severity mapping.