Security teams are not lacking data. They are lacking a shared context. A modern vulnerability program produces huge volumes of findings every week, and three very different personas are trying to make sense of them. The vulnerability analyst need...
Introducing T2 SOC AI Specialist: Your SOC's Newest Analyst Works 24/7 A mature SOC takes 4 hours to contain a security incident. That used to be the gold standard. It no longer is. In that same 4-hour window, lateral movement begins within the fir...
We are excited to welcome you to the Unified Security Exposure Management (USEM) QuickStart Implementation Series, your step-by-step video guide to implementing ServiceNow USEM from the ground up, starting with Vulnerability Response (VR). This s...
ServiceNow's Security & Risk Customer Community Event: Nexus Security & Risk As AI reshapes the security and risk landscape, staying connected with the community tackling these challenges has never been more important. We'd like to invite our Servi...
We are excited to announce the general availability of the Microsoft Defender Incident ingestion integration with ServiceNow Security Incident Response (SIR). This integration brings unified, bi-directional alert and incident synchronization between ...
Security teams are not lacking data. They are lacking a shared context. A modern vulnerability program produces huge volumes of findings every week, and three very different personas are trying to make sense of them. The vulnerability analyst need...
Introducing T2 SOC AI Specialist: Your SOC's Newest Analyst Works 24/7 A mature SOC takes 4 hours to contain a security incident. That used to be the gold standard. It no longer is. In that same 4-hour window, lateral movement begins within the fir...
After migrating to Vulnerability Response v30x — the version that introduces Unified Security Exposure Management (USEM), a significant architectural upgrade to the Vulnerability Response applications — some teams report that legacy deferral/exceptio...
When a user clicks Generate Insights in the Security Exposure Management (USEM), Now Assist may return "There was a problem generating content." and in the log (syslog) shows Dashboard not found: <sys_id> — yet the dashboard record clearly exists whe...
We are excited to welcome you to the Unified Security Exposure Management (USEM) QuickStart Implementation Series, your step-by-step video guide to implementing ServiceNow USEM from the ground up, starting with Vulnerability Response (VR). This s...
Introduction Artificial intelligence is transforming how organizations operate—but it's also introducing a new class of security risks that traditional tools can't address. From shadow AI running on employee laptops to misconfigured AI agents in low-...
Stay on top of AI security with AI Security Exposure Management A new module that brings AI security findings into ServiceNow, so you can manage them with the same efficiency as the rest of your security workflows. Introduction AI is reshaping t...
As you explore USEM (VR v30x), either as an existing customer that has recently migrated or as a brand new customer starting your journey, you will need to make a plan for managing and promoting your configurations (aka USEM rules) between Service...
At the Knowledge Conference in May, the AI Kill Switch was demonstrated. Several of our Security Operations customers and partners have inquired about this feature because they are concerned about Agentic Workflows or AI Agents that are misconfigured...
Now that AI is native to ServiceNow SecOps products and no longer an add-on, a question that I have been receiving frequently is around how to prevent AI from being activated or utilized in their ServiceNow instance until they are ready. The concer...
If you're planning to attempt the ServiceNow CIS‑VR (Vulnerability Response) certification, the right preparation strategy makes all the difference. Based on my experience, a structured + smart revision approach works best. Here’s how you can efficie...
ServiceNow's Security & Risk Customer Community Event: Nexus Security & Risk As AI reshapes the security and risk landscape, staying connected with the community tackling these challenges has never been more important. We'd like to invite our Servi...
The "Success with Vulnerability Response" series of recommended practices deep-dive webinars continues. One of the most requested topics by customers via our customer voice questionnaire is VR Integrations, and as a result, we conducted a recommended...
Today's cloud security teams handle large volumes of exposure findings every day, where most of the noise drowns out the few items that genuinely need immediate action. The data is there, the tools are there. What's short is time, and time runs even ...
ServiceNow is excited to announce the release of the ServiceNow Store Application “Vulnerability Response Integration with Wiz”, scheduled for general availability on July 31, 2025. This is a brand-new Store App integration – built, managed and sup...
USEM Reference Guide: What's Changing for Exception Approver Personas If you’re wondering what's changing for Exception Approvers with your upgrade to Vulnerability Response v30x, the reimagined VR experience Unified Security Exposure Management...
Overview When accessing the On-Call Notification Preferences section inside the Security Incident Response (SIR) Workspace, users may encounter two related issues: The "Edit" button does not open the expected modal/popup for editing delivery channels...
When working in the Security Incident Response (SIR) Workspace, users who create a new Shift Handover record may encounter a situation where clicking the declarative action button "Change to In Progress State" has no effect — the state remains as Dra...
Your vulnerability management program tracks CVEs. Your scanners find them, your analysts prioritise them, your remediation owners patch them. But what about the misconfiguration that made three of those CVEs exploitable in the first place? An ove...
What this integration brings into ServiceNow With a single install, the integration covers three core AWS security scenarios: Host and Lambda vulnerabilities from AWS Inspector & Security Hub flow into Vulnerable Items (VITs) in USEM Vulnerability Re...
Sarah Wood
ServiceNow
LisaLatour
Eric Feron
Mary Hain
seanflack
Steph Morillo
