--- title: State roll-up and roll-down scenarios description: State roll-up and roll-down scenarios automatically sync the status of remediation tasks \(RTs\) and vulnerable items \(VITs\), ensuring real-time updates across both. This dynamic interaction reduces manual tracking, enhances accuracy, and provides users with an up-to-date view of progress, making vulnerability management more efficient and helping users make informed decisions quickly. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/vr-state-rollup-rolldown.html release: australia product: Vulnerability Response classification: vulnerability-response topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 2 breadcrumb: [Vulnerability Response remediation task states, Vulnerability Response reference information, Vulnerability Response, Unified Security Exposure Management, Security Operations] --- # State roll-up and roll-down scenarios State roll-up and roll-down scenarios automatically sync the status of remediation tasks \(RTs\) and vulnerable items \(VITs\), ensuring real-time updates across both. This dynamic interaction reduces manual tracking, enhances accuracy, and provides users with an up-to-date view of progress, making vulnerability management more efficient and helping users make informed decisions quickly. ## Roll-up behavior When vulnerable item \(VIT\)states change, these changes may propagate up to the remediation task \(RT\)level. The following table summarizes key roll-up scenarios where changes in vulnerable item \(VIT\) state may influence the associated remediation task \(RT\) state, based on closure conditions, reassignments, and deferrals.
| VITs State | Condition | RT State |
|---|---|---|
| Open → Under Investigation / Awaiting Implementation \(any sub-state\) / In Review | VIT transitions to any non-final or non-actionable state | Remains Open |
| Open → Closed | All associated VITs have the same sub-state | Closed – <same sub-state as VITs> |
| Open → Closed | All associated VITs have different sub-states | Closed – <no sub-state> |
| Open → some Closed VITs and some Deferred VITs | All associated Deferred VITs have the same sub-state | Deferred – <same sub-state as VITs>\(Until date = earliest of all VITs\) |
| Open → some Closed VITs and some Deferred VITs | All associated Deferred VITs have different sub-states | Deferred – <no sub-state>\(Until date = earliest of all VITs\) |
| Open → Closed–Fixed \(after next scan\) → Resolved | VITs marked as fixed but pending verification | Remains Open |
| Closed–Fixed → Open | VIT reopens after being Closed–Fixed | Remains Closed–Fixed |
| Closed–Stale → Open | VIT reopens after being Closed–Stale | Remains Closed–Cancelled |
| Under Investigation → Closed–CI Decommissioned | Multiple RTs \(e.g., RT1, RT2\) exist for related VITs | Each RT transitions to Closed–Cancelled |
| Resolved → Open | If a resolved VIT reopens and the previously associated RT was assigned to a user | Resolved → Under Investigation |
| Resolved → Open | If a resolved VIT reopens and the previously associated RT was unassigned to a user | Resolved → Open |