Configuration Compliance remediation

Configuration Compliance remediation is primarily a manual process augmented by scheduled jobs (integrations), remediation tasks, workflows, and change requests.

Note:

Starting with v14.9 of Configuration Compliance, the following terms have been renamed:

Table 1. Changes in terminology

Terminology prior to v14.9	Terminology v14.9 onwards
Test Result Group	Remediation Task
Group Rules	Remediation Task Rules
Policy	Test group

Separate third-party SCA plugins acquire and transform data in Configuration Compliance. Before you can use Configuration Compliance to remediate configuration items, you must install a third-party scanner integration and perform at least one network scan.

Use change requests to remediate individual test failures from remediation tasks.

The states of remediation tasks automatically transition as associated change requests move through their life cycles with State synchronization between change requests and remediation tasks. Users with the itil role can create and manage change requests directly from remediation tasks.

• Manually create a Configuration Compliance remediation task
  You can manually create a remediation task from the Remediation Tasks module and perform remediation.
• Manually create a Configuration Compliance remediation task from the Test Results list
  You can manually create a remediation task from the Test Result list and perform remediation from the resulting remediation task.
• Create a change request in Configuration Compliance
  You can create a change request from a remediation task in the Configuration Compliance application.
• Associate a remediation task to an existing change request
  Associate a remediation task in Configuration Compliance application to an existing change request.
• Split a remediation task
  From an existing remediation task in the Configuration Compliance application, identify a subset of test results that you want to move to a new Remediation Task.
• Remove assignments from remediation tasks for you or your groups
  Reassign the test result records in the Configuration Compliance application if the records have been incorrectly assigned to you or your group.
• Approve an unassign request in Configuration Compliance
  Approve requests for the removal of remediation tasks from an assignment group or an individual user in the Configuration Compliance application.
• Automatic closing of test results
  You can automatically close test results (TRs) associated with retired configuration items (CIs).
• Automatically closing stale test results in Configuration Compliance
  You can activate the Auto-Close Stale Test Results feature to automatically close older test results not recently found by your third-party integrations. Moving these test results to Closed-Stale reduces the number of active test results and remediation tasks in your instance and helps you reconcile assets in your Configuration Management Database (CMDB).
• Close a remediation task
  If you determine that the issue associated with a remediation task can be immediately closed without further analysis, you can use the Close feature.
• Requesting and approving an exception for a remediation task
  You can request to defer the remediation of a remediation task for a specified period. Users who are a part of the approver group can approve exception requests.

Related concepts

• Automatic closing of test results

Related tasks

• Manually create a Configuration Compliance remediation task
• Manually create a Configuration Compliance remediation task from the Test Results list
• Create a change request in Configuration Compliance
• Associate a remediation task to an existing change request
• Remove assignments from remediation tasks for you or your groups
• Close a remediation task
• Configure approval rules for Exception Management in Configuration Compliance