---
title: Exploring vulnerability assessment
description: The Vulnerability Assessment Workspace is designed for the Vulnerability Event Manager to create a vulnerability event and to perform vulnerability assessment, especially during the zero-day vulnerability analysis.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/vr-ws-vuln-assessment.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 3
keywords: [Vulnerability assessment, Vulnerability Crisis Management in the Vulnerability Assessment Workspace, Prerequisites for vulnerability assessment, Vulnerability Crisis Management plugin, Risk assessment]
breadcrumb: [Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Exploring vulnerability assessment

The Vulnerability Assessment Workspace is designed for the Vulnerability Event Manager to create a vulnerability event and to perform vulnerability assessment, especially during the zero-day vulnerability analysis.

You can use the vulnerability assessment workspace to manage critical vulnerabilities, such as:

-   Zero-day vulnerabilities of critical or high severity
-   New threat intel identified for a vulnerability
-   Rapid exploitation of a vulnerability of critical or high severity.

## Vulnerability Assessment Workspace and Vulnerability Crisis Management

As a vulnerability event manager, identify and create a vulnerability event record for vulnerabilities of interest. Once you create the vulnerable event, you can perform risk assessment, manually update the risk attributes, and calculate the risk score automatically. Using the Vulnerability Assessment Workspace, you can perform the following actions to handle vulnerability crisis event from inception to resolution.

-   [Create a vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/create-vuln-assessment.md)
-   [Modify the vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/modify-vuln-assessment-record.md)
-   [Perform a vulnerability assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/perform-initial-assesment.md)
-   [Review the Assessment details](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/vr-va-ws-assessment-tab.md)
-   [Assign a priority and exposure level to the vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/assign-priority-exposure-level-vr-va-ws.md)
-   [Add affected CIs to the assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/add-affected-ci-vr-vuln-assess-ws.md)
-   [Create vulnerable items for the affected CI or affected software component](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/vr-va-ws-create-vi.md)
-   [Link the vulnerability assessment record to major security incident in Major Security Incident Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/link-vuln-assessment-msim-vr-va-ws.md)

## Prerequisites for vulnerability assessment

<table id="table_qqv_drb_2yb"><thead><tr><th>

Application

</th><th>

Version

</th></tr></thead><tbody><tr><td>

Vulnerability Crisis Management plugin

</td><td>

1.0

</td></tr><tr><td>

Vulnerability Response

</td><td>

20.0

</td></tr><tr><td>

Vulnerability Response with NVD**Note:** For more information, see [National Vulnerability Database \(NVD\) integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/nvd-vuln-integration.md).

</td><td>

1.4.2

</td></tr><tr><td>

Vulnerability Response Integration with CISA

</td><td>

1.2

</td></tr><tr><td>

Data Model for SBOM

</td><td>

1.1.2

</td></tr><tr><td>

Software Bill of Materials Core

</td><td>

2.0.2

</td></tr><tr><td>

Software Asset Management

</td><td>

Basic Software Asset Management or Software Asset Management Professional plugin

</td></tr><tr><td>

Major Security Incident Management

</td><td>

2.2.5

</td></tr></tbody>
</table>## Scheduled jobs

The following are the scheduled jobs.

<table id="table_nyp_1kk_cyb"><thead><tr><th>

Scheduled job name

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Vulnerability Assessment

</td><td>

Updates the affected configuration items table and the source of the CI if vulnerable items \(VITs or AVITs\) are created after the assessment.**Note:** This scheduled job runs daily. It runs for a longer period than the other scheduled jobs.

</td></tr></tbody>
</table>**Related topics**  


[Vulnerability Crisis Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vulnerability-crisis-management.md)