Issue to automatic remediation task creation

[ankita dutta1]

We are facing an issue where multiple remediation tasks are getting created automatically for VITs and AVITs. Triggers are many - 

- closure of a VUL/AVUL record 

- rejection of an exception record 

- reopening of a VUL/AVUL record

- marking of false positive on a VUL/AVUL record 

Any ideas why this could be happening or which components could be checked? 

Remediation task rule condition are as follows - 

[Vrushali U]

@ankita dutta1 Could you please provide more details about the issue? Triggers that you have mentioned are not related to creation of remediation task. Remediation tasks will be created through remediation task rules and exception rules when you introduce new rule (only for exception rule). Also, this remediation task rule is not having conditions which can match common parameters of vulnerable items.

[ankita dutta1]

hi Vrushali - thats exactly the issue. We haven't changed anything in the remediation task rules or exception rules, and yet new remediation tasks are getting created for existing vulnerable items, especially when the above triggers are occuring on another existing remediation task. 

So the issue is that somehow the system is applying the remediation task rule again and again, even though another remediation task already exists on the VIT record.

For example - 

VIT0001 lead to the creation of remediation task VUL0001 --> this correct behavior 

VUL0001 was closed manually by the user 

VUL0002 is automatically generated for VIT0001 in the system--> malfunctioning behavior. 

Is there any business rule, UI action or component you can point us to to check whats going wrong?

[Vrushali U]

Hi @ankita dutta1 creation of remediation task for existing open VIT is expected behavior. There is a business rule 'Link to Remediation Tasks' which triggers remediation task and exception rules based on BR conditions. If your VIT is active, then it will be added to other remediation task.