Operational Technology Vulnerability Response release notes
Summarize
Summarized using AI
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.
Summary of Operational Technology Vulnerability Response release notes
The Operational Technology Vulnerability Response (OTVR) application on the ServiceNow Store helps manufacturers aggregate OT vulnerability data and manage risk-based actions within their production processes. The application integrates with the Industrial Workspace and provides dashboards, remediation task management, and risk visualization tailored for operational technology environments.
Show less
Key Features
- Risk Visualization and Dashboards: Includes dashboards such as the OT Vulnerability Risk Rollup and OTVR (PA) dashboard to visualize risk by equipment model hierarchy and track vulnerable items' status and remediation progress.
- Remediation Management: Enables creating and managing remediation tasks aligned with operational schedules, with visibility in the Manufacturing and Industrial Workspaces.
- Assignment and Role Enhancements: Allows changing assignment groups for multiple site records simultaneously and introduces the OT Vulnerability Remediation Owner role for efficient task management.
- Integration with Security Frameworks: Supports importing solutions using the Common Security Advisory Framework (CSAF) from multiple vendors.
- Industrial Workspace Enhancements: Provides lists for vulnerable items, remediation tasks, and vulnerability exception approvals to track and manage OT vulnerability states and approvals.
- Migration to Unified Security Exposure Management (USEM): From version 30.0.2, OTVR is consolidated under USEM, requiring customers to use the Migration Assistance Tool for upgrades.
Key Outcomes
- Enhanced OT Security Posture: Customers can identify and prioritize vulnerability risks by production equipment, improving risk-based decision-making.
- Streamlined Vulnerability Response: Integrated remediation task management and role assignments facilitate faster and coordinated response to OT vulnerabilities.
- Improved Visibility: Visualization tools and detailed lists in Industrial Workspace provide comprehensive insights into vulnerabilities and remediation status.
- Compliance and Certification: The application is certified for multiple ServiceNow releases and regional patches, including Australia Patch 3, Xanadu, Washington DC, Vancouver, Utah, and Tokyo, ensuring compatibility and support.
- Upgrade Guidance: Customers using version 30.0.2 and above must migrate to USEM to maintain application functionality and support during upgrades.
Version history for the Operational Technology Vulnerability Response application on the ServiceNow Store.
Important:
For details on system requirements and family compatibility, view the application
listing on the ServiceNow Store
website.
Version history
- Version 31.0.0 - June 2026
- New: Certified for Australia Patch 3
- Version 3.1.0 - March 2026
- Changed: Certified for Australia
- Version 30.0.3 - March 2026
- New: Certified for Australia
- Version 30.0.2 - December 2025
- New: Operational Technology Vulnerability Response version 30.0.2 supports the Security Exposure Management Workspace (SEM Workspace) as Vulnerability Response apps are consolidated under Unified Security Exposure Management (USEM) from version 30.0.2.If you are using Operational Technology Vulnerability Response 30.0.2, you must upgrade to USEM using the Migration Assistance Tool to ensure a safe and successful upgrade.
- Version 2.0.5 - August 2025
-
- New in Zurich release:
- OT Vulnerable Items list in the Industrial Workspace to view all the vulnerable items (VITs) that have been created for your OT environment.
- OT Remediation Tasks list in the Industrial Workspace to view all the remediation tasks that have been created for the respective VITs in your OT environment.
- OT Vulnerability Exception Approvals list in the Industrial Workspace to view any change of state for approvals and details of requested approvals for a given exception triggered from the Industrial Workspace.
- Changed in Zurich release: Demo data not required for Operational Technology Risk Calculator plugin
- New in Zurich release:
- Version 2.0.4 - February 2025
-
- New:
- Improved UI options to view solutions or details of a vulnerable item (VIT).
- Manage your vulnerable items and Operational Technology Vulnerability Response data with the improved OTVR (PA) dashboard in the Industrial Workspace.
- View the risk score of your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard.
- New:
- Version 2.0.3 - November 2024
- Fixed: Updated with various bug fixes.
- Version 2.0.1 - September 2024
-
- New:
- Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once
- Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers
- Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role
- Mitigate controls using the Libraries module in the Industrial Workspace
- Multiple OTVR (PA) dashboard updates
- Certified for Xanadu
- New:
- Version 2.0.0 - August 2024
-
- Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once
- Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers
- Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role
- Mitigate controls using the Libraries module in the Industrial Workspace
- Multiple OTVR (PA) dashboard updates
- Certified for Xanadu
- Version 1.0.10 - February 2024
-
- Vulnerability Risk Rollup by Equipment Model Entity to provide insight into greatest risk areas in the production process
- Industrial Workspace landing page visualization to visualize risk by equipment model entity hierarchy
- OTVR (PA) dashboard to track the volume, performance, and progress of OT vulnerable items
- Certified for Washington DC
- Version 1.0.9 - August 2023
- Certified for Vancouver.
- Version 1.0.8 - February 2023
- New: Certified for Utah.
- Version 1.0.7 - November 2022
- Fixed: Non-functional Show Duplicate VIs UI action removed from OT remediation task form in Manufacturing Workspace.
- Version 1.0.6 - August 2022
-
- New:
- Vulnerability Risk Rollup by Equipment Model Entity to provide insight into greatest risk areas in the production process
- Manufacturing Workspace landing page visualization to visualize risk by equipment model entity hierarchy
- Certified for Tokyo
- New:
- Version 1.0.5 - February 2022
-
- New:
- Added ability to create Remediation Tasks for VITs by Equipment Model Entity - enabling remediation activity to align with operational maintenance schedules within an industrial environment.
- Added visibility for Remediation Tasks in the Manufacturing Workspace and Equipment Model Manager.
- New:
- Version 1.0.3 - November 2021
- The ServiceNow Operational Technology Vulnerability Response application enables manufacturers to aggregate OT vulnerability data and take risk-based action with production process context.