How to work on System Security Centre in Service-now

[Lucky1]

Hello all,

Good day!

I was asked by my customer to start working on "System Security Centre".
I know what it is, but I have below questions.

1. How to work on it and secure our instances

2. What are the key and first look-into elements in it and how to navigate to them?

Note: I have admin role.

So, can you please help me here?

Regards,

Lucky

[Tanushree Maiti]

Hi @Lucky1 

Not fully Correct . Reason being Access Analyzer is for debugging  ACL.

If you are asked to review security of your instance -

My suggestion would be-

Apart from reviewing Security center hardening options :

a. Reach out to your  Servicenow Account executive and request them for Instance Health scan report.

 - From there you will get your instance's security score. Also what best practices needs to follow to make that security 100 % . >80 % score means its good

2) Separately Your can check 

RBAC (Role base Access Control) which  prevents users from accessing, modifying, or viewing data they shouldn't see.

Review your table-level and field-level ACLs. Remember that ServiceNow uses a two-gate system: table-level access must pass first, followed by field-level. 

Here your Integration account will come into scenario.

3)Request periodic Health Scans from your Support Account Manager (recommended once every 6 months to 1 month) to evaluate upgradeability and security.

4) Also go through community articles like for more info.

Administration: Security & Data Privacy || Knowledge & Troubleshooting Resources

[Lucky1]

Hi Tanushree,

Thanks again.

But Not all these.

I want to work with System Security Centre.

So, if you could please let me know what the first priority things to be checked, then I will look into it.

Please help.

Regards,

Lucky

[Tanushree Maiti]

Hi @Lucky1 

Please log in to your instance and navigate to the Security Center.

The UI is designed to be self-explanatory, so you should be able to navigate it easily.

If you get stuck at any point or have any questions, please let me know.

[Lucky1]

Sure Tanushree.

Thanks a lot.

[Mark Manders]

What did you already do/check? Security Center gives you guidelines and scans to see your instance security status.

I would also go back to your customer and ask them what the outcome is they are expecting. Because certain things are simply a choice to either apply or not. And some will have other consequences, like a worse user experience on a more secure platform, while it was already secure to begin with.

Without knowing what their expectation is, you will just be guessing if you are working towards their goal.