How to work on System Security Centre in Service-now

[Lucky1]

Hello all,

Good day!

I was asked by my customer to start working on "System Security Centre".
I know what it is, but I have below questions.

1. How to work on it and secure our instances

2. What are the key and first look-into elements in it and how to navigate to them?

Note: I have admin role.

So, can you please help me here?

Regards,

Lucky

[Tanushree Maiti]

Hi @Lucky1 

If you are admin of your instance, Check Security Center as per the guide:

KB2553467 ServiceNow Security Center Quick Start Guide 

All settings 

Check : Best Practices - Security Center

ServiceNow Security Hardening - Security Center

https://www.youtube.com/watch?v=5urug6F_yvA

Quick Start Guide for ServiceNow Security Center (SSC)

Explore the features available in ServiceNow Security Center and schedule time to regularly review it. With Security Center, you can harden your ServiceNow instance(s) against threats, align with best practices, and get notified of suspicious behaviors.

Stay up to date

Updates occur regularly, more frequently than family releases.

• Regularly check for updates in the SSC instance ServiceNow instance Application Manager.
• Don't forget to press "Sync now."

Security Hardening

Understand how your instances' hardening configurations conform to best practices and find recommended configurations for more than 200 security settings.

• Scan your instance to attain a security hardening score between 1–100% (higher percentages = stronger security posture).

Security Scanner

Enables admins to initiate or schedule scans of their instances against a set of security checks.

• Identify misconfigurations or insecure behaviors. 
• Auditor suite includes recommended checks from ServiceNow.
• Create custom security checks, or save a suite of checks for security and compliance audits.

Security Metrics

Active monitoring of 50+ security metrics to identify potential security threats, suspicious activities, or insecure behaviors.

Security Posture console 

Improve your ability to identify, respond to, and recover from security threats with comprehensive visibility and step-by-step instructions.

• Use Security Tasks to monitor, prioritize, and assign all your security-related tasks in one place.

Security Customer Actions

Ensure your instance is up-to-date by checking recommended available and overdue customer actions.

• Use the +Create task button to create a complete a recommended customer action.

Security Learning

Central hub for ServiceNow security training, compliance documents, portals, and resources and check out this Security Center demo and SecureCheck tutorial.

Additional information

• ServiceNow Security Center (SSC) Overview
• ServiceNow Shared Responsibility Model
• ServiceNow Best Practices Guide
• SSC on ServiceNow Documentation
• SSC Demo on ServiceNow Community
• ServiceNow Community Best Practices
• ServiceNow Community SSC Blog
• SSC Training on ServiceNow University
• ServiceNow Ideas Portal—(Select Security Center under Product/service)

Also check videos on it:

https://servicenowsecurity.gallery.video/detail/videos/servicenow-security-center/video/636076727811...

[Lucky1]

Hi TanuSHree,

Thanks for your reply.

But you reply seems to be very big.

Can you please let me know at least 3 to 4 things that has to be concentrated at first, which can be used to secure our instances.

So, that I will walk-through them and learn and implement.

Regards,

Lucky.

[Tanushree Maiti]

Hi @Lucky1 

😊

In short ,  hit this link:

https://<your_instance_name>/now/security-center-configuration/all_settings

Check all tab. Hardening score, pending action etc. 

Check the shared videos - it will help you to understand the purpose of these tabs/links functionality.

[Lucky1]

Hello TanuShree,

Yeah, Sure, I will go with that.

Thanks again.

When I asked one of my practice head, he guided me to check these three things at first.

Instance Hardening.

Integration accounts making API calls.

Access analyser.

So, is this right?

Regards,

Lucky