How are risk score populated on Remediation task in Vulnerability response

[harshw]

Hi All,

I want to understand how risk score is populated on Remediation task in Vulnerability response module. If there is any logic through which risk score is populated in remediation task then where can I customize it .

Thanks in advance !

@isaak_papagiann 

[Madhav Vemana]

Hello @harshw 

Please refer to Vulnerability Rollup calculators. Details are explained in the below page.

https://docs.servicenow.com/bundle/tokyo-security-management/page/product/vulnerability-response/con...

Regards,

V.Madhav

[Aaron Molenaar]

Hi harshw,

Risk scores on Remediation Task records (and Vulnerability records) are set by rollup calculators, as defined here: https://docs.servicenow.com/bundle/utah-security-management/page/product/vulnerability-response/conc... 

[Dhanraj B]

Hi @harshw 

There is a script include called "RollupCalculatorUtil", this script include is responsible for populating fields in Remediation Task. This script include is called under a scheduled job "Rollup vulnerable item values to vulnerability and group" and related link in Remediation Task form "Update Status". 

After the creation of remediation task, field won't show the correct values. You can click on Update Status in related link or execute "Rollup vulnerable item values to vulnerability and group" scheduled job and the above script include will be called and remediation task fields will show the rollup values of related vulnerable items.

-Dhanraj

[Nitesh Tolani]

The risk score on the Remediation task is populated using the rollup calculator: https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response...

If you would like to customize, you can do so by navigating to the module 'Vulnerability Rollup Calculator'. Open the 'Remediation Task Rollup'. Change the view to 'Rollup Developer View' using the hamburger icon on the top left. Then in the 'Calculator Developer' tab, you will be able to see the script that performs this aggregation. You can customize this script as per your requirements.

Hope this helps.