Maintaining a robust security posture is hard. The new ServiceNow Security Center is here to help!

[Kevin Thompson2]

The ServiceNow platform can transform your entire business and digitize, connect, and automate siloed processes to make work flow!  It is a broad platform that can automate any and all processes for customers and employees.  It is very flexible and immensely customizable.   

As a result, ServiceNow administrators are continuously challenged to enable more workflows and improve existing ones while at the same time making sure they maintain the most secure posture.  Their job is to enable and assist the internal business units to expand and automate their digitalization, but they are also responsible to maintain safe security configurations, implement security best practices and monitor the environment for security risks.  Often, they feel like they just don’t have the time and tools to do everything!   

And how do they know what to do and what best security practices to follow?  Which of the many security settings needs attention?  What security behaviors should they be monitoring for?  Where can they find security information and guidance specific to ServiceNow?  

Introducing the new ServiceNow Security Center!   

ServiceNow Security Center is an application that consists of a set of purpose-built tools designed to help ServiceNow administrators secure their ServiceNow deployments. And ServiceNow has embedded in each tool guidance and best practices that can lead to swift security improvement with little effort. Using Security Center, organizations can improve their security posture, strengthen their compliance levels, and do so with a seamless user experience. 

Security Center helps admins maintain ServiceNow most critical security settings as secure and compliant as possible.  We provide a list of the most important platform settings along with recommended configurations for each, explanations of the security risk, explanation of potential platform impact and an easy way to configure them as such.   

Security Center helps admins scan their instances to look for insecure configurations for tables, roles and scripts.  Some of the hardest and move volatile configuration to monitor for.  We provide an out-of-the-box suite of checks that you can run manually or on a schedule.  And then we provide an easy way to compare results across time to detect risky or inadvertent changes.  

Security Center helps admins monitor 50+ different security behaviors that could be indicative of security attacks or just insecure user actions.  We cover a large spectrum of security areas including logins, privileged users, viruses, data exfiltration and more.  Admins can create their own dashboard to see the trends they care about the most in one place and can create email alerts based on their own thresholds for each.  

Security Center helps admins learn security best practices for ServiceNow.  We provide foundational security guides, in-depth guides for specific security controls and tasks, country and industry specific compliance knowledge articles and link to the ServiceNow security and compliance portals where they can find more information.   

We know that keeping ServiceNow secure and compliant can seem challenging, especially when combined with all the other critical tasks that admins are responsible for across deployments, roll outs, upgrades, new app development, etc.  

The new ServiceNow Security Center can be a great, on-going resource for admin to help them keep ServiceNow deployment secure.  It is built purposely to help ServiceNow admins to address some of the most critical security tasks and it embeds in the tool ServiceNow security best practices.   

ServiceNow Security Center is installed by default with the Vancouver release, and it can be installed from the ServiceNow Store for customers on the Utah release.  As a first step in leveraging this tool to improve your security, we recommend starting by reviewing your Instance Hardening Setting Compliance score to better understand how your security hardening configurations comply with ServiceNow hardening recommendations.