---
title: Perform an assessment
description: After you’ve created the vulnerability assessment record and updated the risk attribute fields, run an assessment of the event record.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/perform-initial-assesment.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 3
keywords: [Perform an assessment in the Vulnerability Assessment Workspace, Run an assessment of the event record, Analyze the threat with an in-depth exposure assessment]
breadcrumb: [Exploring vulnerability assessment, Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Perform an assessment

After you’ve created the vulnerability assessment record and updated the risk attribute fields, run an assessment of the event record.

## Before you begin

Role required: sn\_vul\_analyst.vul\_event\_manager

## About this task

Perform an initial assessment after an event for a vulnerability of interest has been created and determined to present risk to systems and data. The purpose of this activity is to further analyze the threat by updating the risk assessment with an in-depth exposure assessment.

## Procedure

1.  Navigate to **Workspaces** > **Vulnerability Assessment Workspace** > **Vulnerability Assessment**.

2.  Select the relevant record from the list of vulnerability assessment event records.

3.  Select **Assess** to run the vulnerability assessment.

    If the record is in the **New** state, the **Auto-create VITs/AVITs** dialog box opens.

    -   Select the **Auto-create VITs/AVITs** check box to create vulnerable items and application vulnerable items for the affected configuration items and products identified during the assessment, without a separate manual create step. The check box is cleared by default.
    -   Select **Confirm** to continue.
    The **Auto-create VITs/AVITs** value captured when the assessment job starts is used for that assessment run. If you change the value directly on the record after the job starts, the change applies to the next assessment run and doesn't affect the assessment currently in progress.

    The Vulnerability Response - Process vulnerability assessment event background job is initiated and a relevant notification displays.

4.  Select **View Status** on the notification to view the status of the running job.

5.  Select **Save**.

    The **Assessments** tab displays assessment details. When the assessment is processed the VITs or AVITs associated with the vulnerable entries or CVEs display in the **Vulnerable Items** or the **Application Vulnerable Items** tab.


## Result

-   Vulnerable items or TPEs related to the associated CVEs are fetched during assessment. The CIs related to the vulnerable items are also identified and display in the Affected Configuration Items table.
-   If you configure a CI filter on the assessment record, the assessment collects only the configuration items that meet the filter conditions. If no CI filter is configured, the assessment collects all CIs related to the associated CVEs and affected products.
-   If the associated CIs do not exist in the affected CI table, the identified CIs are added to the table and the **Has vulnerable item** field value is set to **True**, and the **Source** field's value is set to Scanner.
-   If the CI already exists in the affected CI table, only the **Has vulnerable item** field value is set to **True** and the **Source** fields value for the CI remains the same as when the assessment record was created.
-   If vulnerable items are created after the assessment a Vulnerability Assessment scheduled job is run to update the affected CIs table and the source of the CI.
-   If you selected **Auto-create VITs/AVITs**, vulnerable items and application vulnerable items for the identified configuration items and affected products are created automatically. You don't need to create them manually. For more information, see [Create vulnerable items for the affected CI or affected software component](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/vr-va-ws-create-vi.md).

## What to do next

-   [Assign a priority and exposure level to the vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/assign-priority-exposure-level-vr-va-ws.md)
-   [Add affected CIs to the assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/add-affected-ci-vr-vuln-assess-ws.md)
-   [Create vulnerable items for the affected CI or affected software component](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/vr-va-ws-create-vi.md)
-   [Add related link to the assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/modify-vuln-assessment-record.md)

**Related topics**  


[Assessment tab](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/vr-va-ws-assessment-tab.md)

[Overview tab](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/vr-va-ws-overview-tab.md)