I am curious of other customers input/interactions with ServiceNow providing security maintenance notifications with very little security information included. I find the recent shift by ServiceNow to perform more frequent security patching along with the overall lack of security details being addressed provides Security practitioners no relevant information to discern the level if risk at the time prior to remediation. With every notification, we have to open a case to ask the same questions so we as a business know or can figure out the level of risk associated to confidentiality, integrity and availability is it relates to our use of ServiceNow and the various applications.
ServiceNow is not being open or transparent with customers regarding the security items being detected and addressed.
