How to work on System Security Centre in Service-now

[Lucky1]

Hello all,

Good day!

I was asked by my customer to start working on "System Security Centre".
I know what it is, but I have below questions.

1. How to work on it and secure our instances

2. What are the key and first look-into elements in it and how to navigate to them?

Note: I have admin role.

So, can you please help me here?

Regards,

Lucky

[Tanushree Maiti]

Hi @Lucky1 

If you are admin of your instance, Check Security Center as per the guide:

KB2553467 ServiceNow Security Center Quick Start Guide 

All settings 

Check : Best Practices - Security Center

ServiceNow Security Hardening - Security Center

https://www.youtube.com/watch?v=5urug6F_yvA

Quick Start Guide for ServiceNow Security Center (SSC)

Explore the features available in ServiceNow Security Center and schedule time to regularly review it. With Security Center, you can harden your ServiceNow instance(s) against threats, align with best practices, and get notified of suspicious behaviors.

Stay up to date

Updates occur regularly, more frequently than family releases.

• Regularly check for updates in the SSC instance ServiceNow instance Application Manager.
• Don't forget to press "Sync now."

Security Hardening

Understand how your instances' hardening configurations conform to best practices and find recommended configurations for more than 200 security settings.

• Scan your instance to attain a security hardening score between 1–100% (higher percentages = stronger security posture).

Security Scanner

Enables admins to initiate or schedule scans of their instances against a set of security checks.

• Identify misconfigurations or insecure behaviors. 
• Auditor suite includes recommended checks from ServiceNow.
• Create custom security checks, or save a suite of checks for security and compliance audits.

Security Metrics

Active monitoring of 50+ security metrics to identify potential security threats, suspicious activities, or insecure behaviors.

Security Posture console 

Improve your ability to identify, respond to, and recover from security threats with comprehensive visibility and step-by-step instructions.

• Use Security Tasks to monitor, prioritize, and assign all your security-related tasks in one place.

Security Customer Actions

Ensure your instance is up-to-date by checking recommended available and overdue customer actions.

• Use the +Create task button to create a complete a recommended customer action.

Security Learning

Central hub for ServiceNow security training, compliance documents, portals, and resources and check out this Security Center demo and SecureCheck tutorial.

Additional information

• ServiceNow Security Center (SSC) Overview
• ServiceNow Shared Responsibility Model
• ServiceNow Best Practices Guide
• SSC on ServiceNow Documentation
• SSC Demo on ServiceNow Community
• ServiceNow Community Best Practices
• ServiceNow Community SSC Blog
• SSC Training on ServiceNow University
• ServiceNow Ideas Portal—(Select Security Center under Product/service)

Also check videos on it:

https://servicenowsecurity.gallery.video/detail/videos/servicenow-security-center/video/636076727811...

[Mark Manders]

What did you already do/check? Security Center gives you guidelines and scans to see your instance security status.

I would also go back to your customer and ask them what the outcome is they are expecting. Because certain things are simply a choice to either apply or not. And some will have other consequences, like a worse user experience on a more secure platform, while it was already secure to begin with.

Without knowing what their expectation is, you will just be guessing if you are working towards their goal.