Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

Remediation Target Rules

jslee102
Tera Contributor

So, my vuln analysts are wondering if there is any way to have the remediation target use a base of when a VIT is assigned to a service now group.  The reason being that the remediation teams are complaining because as certain items get assigned (like we keep. a bunch of lows unassigned, but something changes to make it high), they get the VIT and it is already out of remediation target date.

 

Any thoughts on how that would work?

1 ACCEPTED SOLUTION

HMR00
Tera Expert

so u can a create a business rule to reset the open/last open date upon change of assignment group, this will cover re-assignment use case as well.  Also, only open, in progress may only be considered !

 

Hope this help

View solution in original post

7 REPLIES 7

jslee102
Tera Contributor

Forgot to follow up on this as I did end up creating a business rule that did this and it works great.  Also found the filter that let me have the business rule filter out only if that was done by vulnerability assignment owner or or vulnerability admin.  This way the remediation owners can't game the system.

Sarath S
ServiceNow Employee
ServiceNow Employee

Some customers have raised concerns about recalculating the Remediation Target Date every time a VIT is reassigned. Their worry is that remediation teams could use reassignment to artificially extend SLAs, which would create inconsistencies in audit trails and reporting.

 

Could you please share your thoughts on this?

 

Thanks,

Sarath S