Understanding Key Sections on the
IT Remediation Homepage
in ServiceNow Vulnerability Response
The IT Remediation Homepage in ServiceNow Vulnerability Response (VR) provides a centralized view for security and IT teams to track, prioritize, and act on remediation efforts. Below are explanations for the specific components you mentioned:
🧩 1.
Assigned Remediation Tasks
Definition: These are Remediation Task [sn_vul_remediation_task] records that have been assigned to a specific user or group for action.
Purpose: They represent actionable items generated from Vulnerable Items (VIs) — typically patching, configuration changes, or risk mitigations.
Details Displayed:
Task number and short description
Assigned to / Assignment group
Due date and SLA
State (e.g., Open, Work in Progress, Resolved)
Use Case: Helps remediation engineers or IT ops teams focus on their own workload and prioritize based on criticality.
⚙️ 2.
Preferred Solutions on VIs
Definition: “Preferred Solutions” are the recommended fixes that have been automatically or manually selected for a given Vulnerable Item (VI).
How It Works:
Each Vulnerable Item [sn_vul_vulnerable_item] can have multiple available solutions (patches, KBs, updates).
The Preferred Solution field indicates which one is chosen for remediation.
Purpose: This widget allows vulnerability managers to quickly see which solutions are selected and track progress on applying them.
Example:
Vulnerability: CVE-2024-3456 on Windows Server
Available Solutions: KB12345, KB67890
Preferred Solution: KB12345
Use Case: Ensures consistent and approved remediation actions across multiple systems.
💻 3.
Impacted CIs
Definition: These are Configuration Items (CIs) that are associated with Vulnerable Items or Remediation Tasks.
Purpose: To show which assets in the CMDB are affected by known vulnerabilities and currently under remediation.
Displayed Data Includes:
CI Name and Type (Server, Application, Database, etc.)
Number of related Vulnerable Items
Patch status or compliance state
Use Case: Enables vulnerability and operations teams to assess exposure at the asset level and prioritize patching for critical systems.
Best Practice Tip:
Use the IT Remediation Dashboard filters (e.g., by Assignment Group, Priority, or Business Service) to tailor visibility for remediation teams and management. Combine this view with Performance Analytics (PA) widgets to track MTTR and remediation trends over time.
