Remediation Status on VIT ignores SLA if Deferred?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2 hours ago
We are in the process of updating our platform to Zurich and updating VR to version 26.0.13.
In the update it appears ServiceNow is adding a new functionality within "Transit to Closed" business rule for VIT:
In this new update, a VIT could be defined an SLA via Remediation Target Rule, and then get associated to a Policy Exception and put in a deferred state. Instead of freezing the Remediation Status, or allowing the Remediation Status to continue tracking the prescribed Remediation Target Rule SLA, it negates that and will leverage the associated Policy Exception so that the VIT could show Remediation Status of Target Met well after the actual SLA per Remediation Target Rule set it.
Example:
VIT Created and assigned Remediation Target Rule: 01JAN2026
Remediation Target - 15JAN2026
VIT Deferred date: 14JAN2026
VIT actually Closed (remediated) - 15OCT2027
Remediation Status - Target Met
I am concerned by this implementation, 1) this is not optional, meaning for me to not use this I have to introduce a customization and 2) this provides overlapping timelines/timestamps for when something was due, was done.
- Labels:
-
Vulnerability Response
