---
sourceDocument: Zurich Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/security-management

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Patch orchestration with the Vulnerability Response Workspaces

# Patch orchestration with the Vulnerability Response Workspaces {#ariaid-title1}

Release version: Zurich  
Updated July 31, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Patch orchestration with the Vulnerability Response Workspaces

Patch orchestration within the Vulnerability Response Workspaces enables ServiceNow customers to manage patches and patch deployments effectively for critical vulnerabilities across large asset groups.
This capability integrates scheduled imports from third-party solutions, patch vendors, and vulnerability scanners to provide a cohesive view of patch data in both the classic environment and modern workspaces.
Show full answer Show less  
This integration supports patch scheduling and deployment through popular tools such as HCL BigFix and Microsoft SCCM, allowing users to coordinate patching activities efficiently and with change request approvals when needed.

## Key Features

* **Scheduled Imports:** Automated import of vulnerability and patch data from third-party integrations and vendors to maintain up-to-date patch orchestration information.
* **Workspace and Classic Environment Support:** Patch data is correlated and accessible in both environments, enabling flexible viewing and management options.
* **Patch Scheduling:** Users can schedule patches directly from Patch Update records, Remediation Tasks, and Discovered Items within the workspaces.
* **Integration with Patch Vendors:** Supports scheduling and patch orchestration through integrations with HCL BigFix and Microsoft SCCM.
* **Change Request Approval:** Allows patch deployment scheduling with formal Change Request approvals to align with IT governance processes.
* **Role-Based Access:** Specific roles such as *snvul.vulnerabilityanalyst* or *snvul.vulnerabilityadmin* are required, along with additional roles depending on the patch orchestration integrations in use.

## Using Patch Data in Vulnerability Response Workspaces

Within the IT Remediation Workspace:

* Access patch-related scorecards on the Home view to see Preferred Solutions on Vulnerable Items (VIs), Vulnerable Configuration Items (CIs), and Preferred Patches.
* View and manage Patch Update records and assigned vulnerable items in the List view.
* Schedule patches directly from Patch Update (VPU), Remediation Task (RT), or Discovered Item (SDI) records.

Within the Vulnerability Manager Workspace:

* Monitor patches on watch topics from the Home view, including preferred and potential patches, scheduled patch dates, and related details.
* Review patch data associated with Vulnerability Item Task (VIT) records in the remediation effort List view.

## Requirements and Next Steps

* Ensure required applications for patch orchestration are installed from the ServiceNow Store; some may need separate subscriptions.
* Assign appropriate roles based on the patch orchestration integrations in use to enable viewing and scheduling capabilities.
* Refer to specific documentation on integrations with HCL BigFix and Microsoft SCCM for detailed configuration and role information.  
You can manage patches and patch deployments for critical vulnerabilities for large groups of your assets with Patch orchestration with Vulnerability Response.

## Patch orchestration in the Workspaces {#vr-ws-patch-orch-overview__section_ent_ptq_psb}

Patch orchestration with the Vulnerability Response application uses scheduled imports
from third-party solution integrations, patch vendors, and vulnerability scanners.

Patch orchestration with the Vulnerability Response application is supported in both the
classic environment and the Vulnerability Response workspaces. Correlated data is rolled
up and displayed in both the workspaces and the classic environment. For an overview about
the features, requirements, and information about patch orchestration in the classic
environment, see [Patch orchestration with Vulnerability Response](https://www.servicenow.com/docs/jWHVuS6U29FQo_rzRSYbGA "You can manage patches and patch deployments for critical vulnerabilities for large groups of your assets with Patch orchestration with Vulnerability Response. Vulnerability Response Patch Orchestration and the patch orchestration integrations are available on the ServiceNow Store.").

* For more information about the supported integrations with patch vendors, see [Understanding the HCL BigFix patch orchestration integration with Vulnerability Response](https://www.servicenow.com/docs/iROV5Bt3lMqGaXl01fFEmQ "You can manage patches and patch deployments for critical vulnerabilities for large groups of assets with the Vulnerability Response patch orchestration integration with the HCL BigFix product.") and [Vulnerability Response patch orchestration integration with Microsoft SCCM](https://www.servicenow.com/docs/Xk6XyIZDkDpVCa9F8c5SdA "The Vulnerability Response integration with the Microsoft System Center Configuration Manager (SCCM) supports patch management and deployment for critical vulnerabilities across your assets.").
* For information about how to schedule patches form records in the workspaces, see [Schedule patches with the Microsoft SCCM integration with Vulnerability Response](https://www.servicenow.com/docs/GDvxFqScXu6CtP3QW32yLg "Schedule patches from Patch Update and Remediation task records in the Vulnerability Response application in your ServiceNow AI Platform instance.") and [Schedule patches with the Vulnerability Response patch orchestration integration HCL BigFix](https://www.servicenow.com/docs/mesyrbdu16NzetfrTBB9eA "Schedule patches from Patch Update and Remediation task records in the Vulnerability Response application in your ServiceNow AI Platform instance.").
* For information about scheduling a patch deployment from a remediation task with Change Request approval, see [Schedule a patch deployment with Change Request approval](https://www.servicenow.com/docs/41CfbQA5Y7g3WUkKnB2vvA "Schedule a patch deployment from a remediation task through a Change Request for approval, and optionally deploy the patches automatically after the change is approved.").
{#vr-ws-patch-orch-overview__ul_wwc_stq_psb}

## Available versions of applications and dependencies required for the patch
orchestration integration {#vr-ws-patch-orch-overview__section_lqf_rbp_hsb}

To view patch Orchestration data and available updates (patches) in the workspaces in Vulnerability Response, the following applications are required. All applications listed are
available in the ServiceNow® Store. Some applications require separate
subscriptions. See [Patch orchestration with Vulnerability Response](https://www.servicenow.com/docs/jWHVuS6U29FQo_rzRSYbGA "You can manage patches and patch deployments for critical vulnerabilities for large groups of your assets with Patch orchestration with Vulnerability Response. Vulnerability Response Patch Orchestration and the patch orchestration integrations are available on the ServiceNow Store.").

## Roles required {#vr-ws-patch-orch-overview__section_orz_kby_rsb}

In addition to the sn_vul.vulnerability_analyst or sn_vul.vulnerability_admin roles
required for the Vulnerability Response Workspaces, users need roles that are specific to
the patch orchestration integrations you are using to view data and schedule patches. See
the following supported integrations for more information about these roles.

See [Understanding the HCL BigFix patch orchestration integration with Vulnerability Response](https://www.servicenow.com/docs/iROV5Bt3lMqGaXl01fFEmQ "You can manage patches and patch deployments for critical vulnerabilities for large groups of assets with the Vulnerability Response patch orchestration integration with the HCL BigFix product.")
and [Vulnerability Response patch orchestration integration with Microsoft SCCM](https://www.servicenow.com/docs/Xk6XyIZDkDpVCa9F8c5SdA "The Vulnerability Response integration with the Microsoft System Center Configuration Manager (SCCM) supports patch management and deployment for critical vulnerabilities across your assets.").

## Patch data in the Vulnerability Response Workspaces {#vr-ws-patch-orch-overview__section_vb5_kfj_rsb}

In the [IT Remediation Workspace](https://www.servicenow.com/docs/vWApZ9taixflQS0afme7BQ "The IT Remediation Workspace is intended for IT remediation owners and IT groups. It is composed of home and list views as well as data visualizations that you can click that let you see the remediation tasks you've been assigned and how many records assigned to you have solutions."), you can
view patch data in the workspaces:

* On the Home view, click scorecards to view records for Preferred solutions on VIs, Vulnerable CIs, and Preferred Patches on VIs.
* On the List view, view all the Patch Update records (VPUs) and the vulnerable items that are assigned to you that have patches from the available links.

{#vr-ws-patch-orch-overview__ul_j1j_kgj_rsb}

You can schedule patches from the following records:

* Patch Update (VPU)
* Remediation task (RT)
* Discovered Item (SDI)

{#vr-ws-patch-orch-overview__ul_ov4_pgj_rsb}

In the [Vulnerability Manager Workspace](https://www.servicenow.com/docs/3TBQwyiuKSxD6b8SK6mirw "As a vulnerability manager and analyst, get a unified view of all the vulnerability types in the Vulnerability Manager Workspace. You can see host, application, and container vulnerabilities and configuration issues, create watch topics across these vulnerabilities and misconfigurations, create remediation efforts and remediation tasks."), you can view patches:

* From the Home view on watch topics on the Vulnerable Items tab, you can view preferred and potential patches, Patch scheduled dates, and other information.
* From the List view on remediation effort records, you can view patch data on VIT records on the Vulnerable Items tab.
{#vr-ws-patch-orch-overview__ul_i2s_5gj_rsb}