--- sourceDocument: australia Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/australia/delta-xanadu-australia Release : - australia ft:locale : - en-US ft:publication_title : - australia Combined Product Files ft:clusterId : - delta3ax bundleId : - delta3ax --- # Combined Security Posture Control release notes for upgrades from Xanadu to Australia # Combined Security Posture Control release notes for upgrades from Xanadu to Australia {#ariaid-title1} Release version: Australia Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 12 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Security Posture Control Release Notes for Upgrades from Xanadu to Australia This consolidated release note provides ServiceNow customers with a comprehensive view of updates, new features, changes, deprecations, and activation information for Security Posture Control as they upgrade from the Xanadu release family through Yokohama and Zurich, up to the Australia release. It helps you prepare for your upgrade by outlining key enhancements, important configuration guidance, and integration capabilities across multiple versions of the Security Posture Control application. Show full answer Show less ## Key Features * **Mitigation Controls Monitoring (Xanadu):** Enables detection of mitigation controls on on-premise and cloud assets based on MITRE frameworks. Supports integration with security tools such as F5 BIG-IP (WAF), CrowdStrike, Microsoft Defender, and SentinelOne for automatic mapping of mitigations to vulnerabilities, enhancing risk assessment accuracy. * **Custom Insights Enhancement:** The Custom insights module is renamed Configured insights, requiring group assignments for report categorization and dashboard visualization in the Security Posture Control workspace. * **Policy Builder and Audits:** Enhancements include support for aggregated data matching, expanded hardware asset properties, and improved policy audits that exclude retired assets unless reactivated. * **API Connector Builder with Generative AI (Yokohama and Zurich):** Developers can create custom API service graph connectors using the Connector builder framework with assistance from generative AI skills (Now Assist), automating steps like template selection and response mapping. This facilitates tailored integrations with security tools and import of asset data suited to your environment. * **New Asset Profiles and Policies:** Provided policies and asset profiles identify configuration gaps and security tool coverage issues for tools including CrowdStrike, Microsoft Intune, Defender, SCCM, HCL BigFix, SentinelOne, Qualys, and Rapid7. * **SentinelOne and Netskope Integrations:** SentinelOne mitigation controls data and asset/software inventory from Netskope can be imported into the ServiceNow platform to enhance security posture visibility. * **Coral Theme and Dark Mode (Zurich):** Introduces the Coral theme as the default look for portals and mobile experiences, with a dark mode option to improve usability and reduce eye strain. ## Important Upgrade and Activation Information * Before upgrading to Australia, complete all recommended pre- and post-upgrade tasks to ensure a smooth transition. * Security Posture Control is available from the ServiceNow Store; install required applications by requesting them via the Store. * Zurich Patch 12 initiates the preparation for deprecation of Now Assist for Vulnerability Response (renamed ServiceNow Otto for Unified Security Exposure Management) but continues support on existing instances. * To enable CMDB 360 multisource data integration, ensure the system property `glide.identificationengine.multisourceenabled` is set to true, requiring the `cmdbmsadmin` role for modification. ## Changes and Enhancements * Improved clarity in the user interface by expanding abbreviations such as "EDR" to "Endpoint Protection" in mitigation control detail records. * Policy evaluations now exclude retired assets unless they return to active status, ensuring accurate security posture assessments. * Introduction of a dark theme option as part of the new Coral theme enhances accessibility and usability for web and mobile users. ## Removed and Deprecated Features No features or functionalities were removed or deprecated between Xanadu and Australia releases, ensuring continuity and stability of existing capabilities. ## Additional Notes * No updates were made specifically in the Australia release for Security Posture Control. * Browser requirements, localization, and accessibility information remain consistent across releases, with enhancements focused on theme and user experience. ## Practical Benefits for ServiceNow Customers By leveraging these updates, ServiceNow customers can: * Gain comprehensive visibility into mitigation controls and security tool coverage across enterprise assets. * Use AI-assisted tools to rapidly build custom API integrations tailored to their environment. * Monitor and report on overall security posture with improved insight into configuration gaps and vulnerabilities. * Automate remediation workflows and policy compliance monitoring effectively. * Enhance user experience with improved UI clarity and new theme options. Consolidated page of all release notes for Security Posture Control from Xanadu to Australia. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Security Posture Control release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Security Posture Control to Australia Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-securityposturecontrol-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | For a complete list of the applications that are required to implement Security Posture Control, see [Install Security Posture Control](https://www.servicenow.com/docs/access?context=spc-install&family=xanadu&ft:locale=en-US). | | Yokohama | Upgrade information : For a complete list of the applications that are required to implement Security Posture Control, see [Install Security Posture Control](https://www.servicenow.com/docs/access?context=spc-install&family=yokohama&ft:locale=en-US). | | Zurich | Upgrade information : For a complete list of the applications that are required to implement Security Posture Control, see [Install Security Posture Control](https://www.servicenow.com/docs/access?context=spc-install&family=zurich&ft:locale=en-US). Starting with Zurich Patch 12, Now Assist for Vulnerability Response is being prepared for future deprecation. It will be hidden and no longer installed on new instances but will continue to be supported. For details, see the [Deprecation Process \[KB0867184\]](https://support.servicenow.com/kb_view.do?sysparm_article=KB0867184) article in the Now Support Knowledge Base. The change is reflected in the name of ServiceNow® products, including Now Assist for Vulnerability Response which is called ServiceNow Otto for Unified Security Exposure Management. See [ServiceNow Otto for Unified Security Exposure Management](https://www.servicenow.com/docs/access?context=now-assist-for-usem-landing-ties&family=zurich&ft:locale=en-US) for more information. | | Australia | No updates for this release. | [ ] ## New features Between your current release family and Australia, new features were introduced for Security Posture Control. {#dfrn3-securityposturecontrol-summary__entry__12} | Release | Release notes | |-|-| | Xanadu | [Mitigation Controls Monitoring with Security Posture Control](https://www.servicenow.com/docs/access?context=spc-mitigation-exploring&family=xanadu&ft:locale=en-US) : From within the Security Posture Control workspace, detect mitigation controls of various types as described by MITRE on all on-premise and cloud enterprise assets. Gain insight into which threats to your assets are mitigated by available mitigation controls based on how various security tools are configured. * Activate mitigation control policies that are included with the application that identify MITRE mitigations on your assets. * Identify your assets that have Web Application Firewall (WAF) protection with supported tools that include F5 BIG-IP. Automatically map a WAF mitigation to vulnerable items by analyzing the policy signatures in the firewall and the Common Vulnerabilities and Exposures (CVE) information. * Identify exploit mitigation controls from endpoint protection or Endpoint Detection and Response (EDR) tools like CrowdStrike and Microsoft Defender. Automatically map the EDR exploit mitigation controls to relevant vulnerable items by analyzing the vulnerability information and the EDR mitigation control configuration. * Populate vulnerable items with relevant attributes that can be used in your Vulnerability Response risk calculator rules. * Import agent information from the SentinelOne product into your ServiceNow AI Platform® with the [Service Graph Connector for Sentinel One](https://www.servicenow.com/docs/access?context=sgc-sentinelone-integration&family=xanadu&ft:locale=en-US). * Import asset data from the Splunk product into your ServiceNow AI Platform® with the [Service Graph Connector for Splunk](https://www.servicenow.com/docs/access?context=sgc-splunk-integration&family=xanadu&ft:locale=en-US). [Enhancements to custom insights in the Security Posture Control Workspace](https://www.servicenow.com/docs/access?context=spc-custom-insight-overview&family=xanadu&ft:locale=en-US) : The name of the Custom insights module has been changed to the Configured insights module in the Security Posture Control Workspace. You must assign groups to organize your reports by categories when you create custom insight records. Groups determine where your data visualizations are displayed on the dashboard in the Configured insights module according to the criteria you set. [Enhancements to the Condition policy builder in the Policies and findings module](https://www.servicenow.com/docs/access?context=spc-create-policy&family=xanadu&ft:locale=en-US) : Select With aggregated data for Connection to ensure that your policy matches assets that have slight variations in reported data. The following properties for policies for hardware assets are supported as they're reported by different sources: * Host name * FQDN * OS * OS Version * OS Domain * OS Service Pack [Test result and remediation task state transitions](https://www.servicenow.com/docs/access?context=spc-findings-state-transition&family=xanadu&ft:locale=en-US) : Enhancements to policy audits ensure that retired assets are not evaluated by activated policies. If the state of an asset transitions from Retired back to Active, it is included in the next policy evaluation. | | Yokohama | [Create a custom API service graph connector in the Security Posture Control workspace](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=yokohama&ft:locale=en-US) : Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the Security Posture Control workspace. With a Now Assist skill that is included with the ServiceNow Otto for Unified Security Exposure Management application, your developers have the option to automate steps in the Connector builder framework. * You have the option to automate the steps for selecting API templates, populating request and header parameters, and response field mapping with generative AI. Note: You must install [Yokohama Patch 11](https://www.servicenow.com/docs/access?context=yokohama-patch-11&family=yokohama&ft:locale=en-US) of the ServiceNow Otto for Unified Security Exposure Management application to have access to the generative AI skill for the Connector builder framework. See the [ServiceNow Otto for Security Incident Response (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=yokohama&ft:locale=en-US) and [Supporting information](https://www.servicenow.com/docs/access?context=supporting-information-now-assist-vr&family=yokohama&ft:locale=en-US) for more information. * Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment. * Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build. [Enhancements to policies and asset profiles included with the Security Posture Control application](https://www.servicenow.com/docs/access?context=spc-policies-overview&family=yokohama&ft:locale=en-US) : Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage for the following tools: * CrowdStrike * Microsoft Intune, Defender, and SCCM * HCL Big Fix * SentinelOne * Qualys * Rapid7 [SentinelOne integration for mitigation controls monitoring](https://www.servicenow.com/docs/access?context=spc-controls-policies-for-edr&family=yokohama&ft:locale=en-US) : You can import SentinelOne mitigation controls data with this integration to help you detect which mitigation controls are on your assets. Use this integration with the asset and software data that you import with the SentinelOne Service Graph Connector to help you monitor your security tool coverage on your enterprise assets. [Netskope](https://www.servicenow.com/docs/access?context=sgc-netskope-integration&family=yokohama&ft:locale=en-US) : This product pulls in asset inventory data for hardware and software from the Netskope database into the ServiceNow Configuration Management Database (CMDB) application. | | Zurich | [Create a custom API service graph connector in the Security Posture Control workspace](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=zurich&ft:locale=en-US) : Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the Security Posture Control workspace. With a Now Assist skill that is included with the ServiceNow Otto for Unified Security Exposure Management application, your developers have the option to automate steps in the Connector builder framework. * You have the option to automate the steps for selecting API templates, populating request and header parameters, and response field mapping with generative AI. Note: You must install Zurich Patch 4 of the ServiceNow Otto for Unified Security Exposure Management application to have access to the generative AI skill for the Connector builder framework. See the [ServiceNow Otto for Security Incident Response (SIR) (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=zurich&ft:locale=en-US) and [Supporting information](https://www.servicenow.com/docs/access?context=supporting-information-now-assist-vr&family=zurich&ft:locale=en-US) for more information. * Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment. * Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build. [Enhancements to policies and asset profiles included with the Security Posture Control application](https://www.servicenow.com/docs/access?context=spc-policies-overview&family=zurich&ft:locale=en-US) : Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage for the following tools: * CrowdStrike * Microsoft Intune, Defender, and SCCM * HCL Big Fix * SentinelOne * Qualys * Rapid7 | | Australia | No updates for this release. | [ ] ## Changes Between your current release family and Australia, some changes were made to existing Security Posture Control features. {#dfrn3-securityposturecontrol-summary__entry__22} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | * Security Posture Control relies on data from service graph connectors that is populated in the CMDB 360 Data \[cmdb_multisource_data\] table. This data is populated only when the glide.identification_engine.multisource_enabled system property is set to true. You must have the cmdb_ms_admin role to modify property values. To set the property, navigate to AllConfigurationCMDB 360 Properties. * The labels on the form view for the mitigation control details record associated with vulnerable item records (VITs) have been enhanced for more clarity. These updates make the interface more user-friendly by expanding abbreviations on the form view, such as changing "EDR" to "Endpoint Protection." Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | | Australia | No updates for this release. | [ ] ## Removed Between your current release family and Australia, some Security Posture Control features or functionality were removed. {#dfrn3-securityposturecontrol-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Deprecations Between your current release family and Australia, some Security Posture Control features or functionality were deprecated. {#dfrn3-securityposturecontrol-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Activation information Review information on how to activate Security Posture Control. {#dfrn3-securityposturecontrol-summary__entry__52} | Release | Release notes | |-|-| | Xanadu | Install Security Posture Control by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=xanadu&ft:locale=en-US). | | Yokohama | Activation information : Install Security Posture Control by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: Security Posture Control is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | Activation information : Install Security Posture Control by requesting the required applications from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: Security Posture Control is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__72} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Security Posture Control, such as specific requirements or compliance levels. {#dfrn3-securityposturecontrol-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | Accessibility information : Dark theme : The new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability. | | Australia | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__92} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__102} | Release | Release notes | |-|-| | Xanadu | * Use the policies included with the application or custom policies that you create to monitor your assets for overall security tool coverage, compliance with internal configuration standards, critical combinations of security gaps and vulnerabilities, and possible internet exposure. * Search for assets based on queries that you create for data from a wide variety of supported API integrations (service graph connectors) or ServiceNow products. * Create custom insights and monitor important metrics from a dashboard. Report on your overall security posture to IT, IT and security managers, and other key stakeholders. * Identify priority vulnerabilities and drive resolution through insights from Security Posture Control in Vulnerability Response risk calculators and remediation target rules. * Gain insight into which threats to your assets are mitigated by available mitigation controls based on how various security tools are configured with Mitigation Controls Monitoring. * Automate remediation workflows for security gaps by publishing findings from Security Posture Control policies in the ServiceNow® Configuration Compliance application. See [Security Posture Control](https://www.servicenow.com/docs/access?context=spc-landing&family=xanadu&ft:locale=en-US) for more information. | | Yokohama | * Create and publish your own API connectors with a step-by-step process in the Connector builder module in the Security Posture Control workspace. You can use generative AI to automate some steps. See the [ServiceNow Otto for Security Incident Response (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=yokohama&ft:locale=en-US) for more information about the Now Assist skill. * Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. * Use the policies included with the application or custom policies that you create to monitor your assets for overall security tool coverage, compliance with internal configuration standards, critical combinations of security gaps and vulnerabilities, and possible internet exposure. See [Security Posture Control](https://www.servicenow.com/docs/access?context=spc-landing&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * Create and publish your own API connectors with a step-by-step process in the Connector builder module in the Security Posture Control workspace. You can use generative AI to automate some steps. See the [ServiceNow Otto for Security Incident Response (SIR) (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=zurich&ft:locale=en-US) for more information about the Now Assist skill. * Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. * Use the policies included with the application or custom policies that you create to monitor your assets for overall security tool coverage, compliance with internal configuration standards, critical combinations of security gaps and vulnerabilities, and possible internet exposure. See [Security Posture Control](https://www.servicenow.com/docs/access?context=spc-landing&family=zurich&ft:locale=en-US) for more information. | | Australia | No updates for this release. | [ ] *[\>]: and then