---
sourceDocument: Australia Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Bulk edit form fields

# Bulk edit form fields {#ariaid-title1}

Release version: Australia  
Updated October 8, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Bulk edit form fields

The Bulk Edit modal in the Security Exposure Management Workspace allows ServiceNow customers to update multiple vulnerability or configuration test records simultaneously.
The available fields and options depend on the selected State or Risk rating.
This feature enables efficient management of vulnerabilities and remediation tasks by applying bulk changes based on filters, selections, or specific vulnerability entries.
Show full answer Show less  

## Key Features

* **Record selection:** Choose which records to update, including selected items, all filtered records, records within a remediation task, specific vulnerability entries (CVE or TPE), or configuration test results. Note that records with invalid or decommissioned CIs are excluded, and only records in Open, Under Investigation, or Awaiting Implementation states are updated.
* **State field:** Setting the State to Deferred triggers a deferral request, spawning a remediation task for approval. Selecting State reveals related fields such as Reason, Short description, Until, and Additional information. Only one of State or Risk rating can be changed per bulk edit.
* **Risk rating field:** Allows setting a target risk rating for vulnerabilities. Choosing Risk rating hides the State field and displays fields for Compensating controls and Modify risk until (expiration date for the rating). This option supports associating compensating controls from the control library.
* **Preferred solution and patch:** Specify remediation solutions or patches for host vulnerable items. Patch Orchestration must be installed to view preferred patches.
* **Assignment management:** Unassign removes existing assignment groups and remediation owners, while the Assignment group field enables reassigning items to active groups. Unassign disables the Assignment group field.
* **Deferral details:** When deferring records, specify the Reason (e.g., Awaiting Maintenance Window, Fix Unavailable), Short description for the remediation task, Until date for deferral expiration, and Additional information visible in both vulnerability and remediation task notes.
* **Work notes:** Add descriptive notes about the bulk changes made.

## Practical Application

Using the Bulk Edit modal, ServiceNow customers can efficiently update multiple vulnerability records or test results, streamline exception requests via deferrals, and maintain accurate assignment and risk status. This capability helps optimize vulnerability remediation workflows, reduces manual effort, and ensures consistent tracking of risk and remediation status across many records simultaneously.  
The following table shows the fields on the Bulk Edit modal in the Security Exposure Management Workspace. The fields that appear depend on the State or Risk rating value you select.
{#sem-bulk-edit-request-exception-form__table_t4d_4bd_5s__entry__2}{#sem-bulk-edit-request-exception-form__record-slection-field}

| Field | Description |
|-|-|
| Record selection | Records to update. Choices are: * Only Selected Items: Select this option if you want to update the records you selected using the check box. * All records that match filter: Select this option if you want to update the filtered records. * Remediation Task: Select this option if you want to update the records in a remediation task and then select the desired remediation task in the Remediation task field. * Vulnerability Entry: Select this option if you want to update the records specific to a vulnerability and then select a CVE or TPE in the Vulnerability Entry field. Note: This field appears for host vulnerable items, application vulnerable items, and container vulnerable items. * Configuration test: Select this option if you want to update the test results specific to a test and then select a test in the Configuration test field. Note: This option appears for Configuration test results only. {#sem-bulk-edit-request-exception-form__ul_jlv_wdr_hbb} Note: * Records with invalid CI or CI decommissioned aren't updated. * Only the records in the Open, Under Investigation, or Awaiting Implementation state are updated. {#sem-bulk-edit-request-exception-form__ul_fcc_mtw_2bc} |
| State | Select the Deferred state to request an exception for the selected records. Note: * When you select this option, the Reason, Short description, Until, and Additional information fields appear. * When you defer records, a remediation task is created and this task is sent for approval. * Only findings in Open, Under investigation and awaiting implementation state can be deferred. {#sem-bulk-edit-request-exception-form__ul_q5y_spn_21c} Selecting a value for State hides the Risk rating field. You can change only one of State or Risk rating in a single bulk edit action. |
| Risk rating | Target risk rating for the selected vulnerable items. Leave this field set to Select if you don't want to change the risk rating. Note: Selecting a value for Risk rating hides the State field and displays the Compensating controls and Modify risk until fields. |
| Compensating controls | One or more compensating controls to associate with the risk change. Optional. This field appears only when Risk rating is selected. If compensating controls are associated with the vulnerability, only those controls appear. Otherwise, all active controls from the library appear. |
| Modify risk until | Date on which the modified risk rating expires. This field appears only when Risk rating is selected. |
| Preferred solution | Solution targeted for remediating the selected vulnerable items. For field details, see [Bulk edit host vulnerable items with patches and solutions](https://www.servicenow.com/docs/Vn4c9BE5mfSZjORiFYlq6Q "Recommend a patch or solution for multiple host vulnerable items concurrently using the bulk edit feature in the Security Exposure Management Workspace."). |
| Preferred patch | Patch targeted for remediating the selected vulnerable items. You must install Patch Orchestration to view the list of preferred patches. For field details, see [Bulk edit host vulnerable items with patches and solutions](https://www.servicenow.com/docs/Vn4c9BE5mfSZjORiFYlq6Q "Recommend a patch or solution for multiple host vulnerable items concurrently using the bulk edit feature in the Security Exposure Management Workspace."). |
| Unassign | Removes the assignment group and remediation owner from the selected items. This field appears when State is set to Do Not Update. For field details, see [Remove assignments for host vulnerable items in bulk](https://www.servicenow.com/docs/pIl7koHg2sYkbun2Bpclew "Remove yourself or your groups from the  Assigned to  and  Assignment group  fields on the findings if you determine that the records aren’t within your scope for remediation, or if you think that records have been incorrectly assigned to you or to your groups."). |
| Assignment group | Assignment group to which the selected items are reassigned. All active assignment groups appear in this field. This field is deactivated when the Unassign check box is selected. |
| Reason | Reason for deferring records: * Awaiting Maintenance Window * Fix Unavailable * Risk Accepted * Mitigating Control in Place * Other {#sem-bulk-edit-request-exception-form__ul_rrl_xdm_5kc} Note: This field appears when you select the State as Deferred. |
| Short description | Brief note describing the reasons for deferral request. This information reflects in the Description field of the remediation task that is created for a deferral request. Note: This field appears when you select the State as Deferred and Closed-False positive. |
| Until | Date till which the record remains deferred. Note: This field appears when you select the State as Deferred. |
| Additional information | Any other necessary information. This information reflects in the Additional Information field in the Overview tab of the remediation task that is created for deferral and closed-false positive requests. If your deferral request is approved, this additional information appears as deferral notes for both VIT and remediation task. Note: This field appears when you select the State as Deferred and Closed-False positive. |
| Work notes | Text that you enter to describe the changes. |
[Table 1. Bulk Edit modal fields]

{#sem-bulk-edit-request-exception-form__table_t4d_4bd_5s}
**Related tasks**   

* [Request bulk exception in the Security Exposure Management Workspace](https://www.servicenow.com/docs/SVN8qTeLwKylhvMaOly9Dg "Request an exception for multiple findings concurrently using the bulk edit feature instead of manually selecting each record.")