OOB Automation for Updating Remediation Task State Based on Vulnerable Items in ServiceNow

[gowtham1610]

Does ServiceNow provide an  (OOB) solution to automatically update the state of a remediation task based on the state of its associated vulnerable items? Where can I find the relevant code in Business Rules (BR), Script Includes (SI) or etc? Could you provide details?

[andy_ojha]

Hey there - yes, there is baseline logic that rolls up from Detections > Vulnerable Items > Remediation Task.

This logic is handled with various components, namely scheduled jobs and script includes.

Based on the following details, are you not seeing the baseline logic for state roll-ups being applied in your environment?

https://www.servicenow.com/docs/bundle/yokohama-security-management/page/product/vulnerability-respo...

Rollup of VI states to remediation tasks (VUL)

State precedence: Open > Closed - Fixed > Closed - Stale.

1. If any VIs in a VUL (remediation task) are Open, the VUL state is not changed.
2. If at least one VI is Closed - Fixed and the rest are Closed - Stale, the VUL state transitions to Closed - Fixed.
3. If all the VIs in a VUL are Closed - Stale, the VUL state transitions to Closed - Canceled.

[gowtham1610]

i need for all states not only for only closed or resolved or cancelled i need for all states