Any Source for Data Import in Configuration Compliance Authoritative Source

[saumyasri]

Hello ServiceNow experts,

I'm seeking insights into the integration capabilities of the Configuration Compliance Authoritative Source module. Specifically, I'm interested in understanding if it offers any integrations that automatically bring in configuration data, similar to how the Vulnerability Response module seamlessly integrates with NVD.

I'm eager to learn more about this functionality and how it can enhance configuration compliance efforts.

[Greg Stone1]

Hi. I might not be understanding fully the question. For example, we are using the PCRS integration with Qualys to bring in the failed and passing tests from the Qualys configuration compliance scans. This automatically creates CTRs and assigns them to the right assignment group. From there we build tickets using conditions and assign them to remediators. Is this what you mean?

[Joe Kline]

I'll be interested to see if there is anything similar to the NVD stream.  So far, my experience with Configuration Compliance is that when you get Policies, Policy Details, and Controls imported - the Authoritative Sources data gets populated from all of that.  To me, that "module" is just a list view of some table records based on what came from the Qualys Policy Compliance data (other than the results) ... Is that what you are referring to?

[saumyasri]

Hi,

Basically I'm referring to Authoritative source of Configuration compliance whether any Integration is there that brings commonly source just like NVDs in Vulnerability Response  

[Joe Kline]

Right!  I kind of expected that is what you were going for - I have not found anything that implies there are separate integrations to go find that data from other sources and comingle it.  But, then, I am still learning as well, and dealing with the other issues of the product set and user expectations of what we provide them.  As I noted in my previous reply, I only know that data is populated out of the details we get by grabbing the policies and controls out of Qualys.