---
sourceDocument: Australia Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Cloud Exposure view

# Viewing the Cloud Exposure View dashboard {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Viewing the Cloud Exposure View dashboard

The Cloud Exposure View dashboard, accessible through the Security Exposure Management workspace, enables cloud security teams to monitor and manage security exposures across their cloud environments.
It aggregates security findings from multiple vendors and cloud assets, providing interactive visualizations and filtering options to help focus on critical security issues.
Show full answer Show less  

## Access and Roles

* Navigate via Workspaces \> Security Exposure Management \> Cloud Exposure View.
* Required roles to use this module:
  * **snsecexception.read** to view the workspace.
  * **snvulcmn.usemadmin** to configure workspace rules.

## Key Filters and Data Organization

Users can filter and organize findings using these top-level filters:

* **Finding type:** Includes Host Vulnerability Response (virtual machines, servers), Configuration Compliance (misconfigurations and issues in cloud resources like S3 and EC2), and Container Vulnerability Response.
* **Source:** Filter by third-party scanner product integrations installed in your instance.
* **Risk rating:** Filter by criticality levels (Critical, High, Medium). Low and None criticality can be included via Settings, but default settings help focus on important findings.

Note: Corresponding applications must be installed to view imported data for each finding type.

## Dashboard Cards and Interactive Views

* **Needs attention:** Quickly access lists of unassigned, overdue, remediation due soon, and in-review findings by selecting totals on cards.
* **Cloud Security Overview:** Displays active findings categorized by cloud provider and asset type (Compute, Network, Storage, Other).
* Selectable data visualizations allow viewing detailed records for assets, base images with the most exposures, accounts, regions, and compliance status.

## Findings Presentation

* Findings are grouped by category: Host, Misconfigurations (Test results), Toxic combinations (Issues), and Container vulnerabilities.
* Color-coding for criticality:
  * Critical - Red
  * High - Orange
  * Medium - Yellow
* Users can view up to 1,000 records per list and select date ranges (last 7 or 30 days) for time-bound analysis.

## Additional Insights

The dashboard highlights toxic combinations and least compliant accounts based on failed test results imported through Configuration Compliance and Wiz Vulnerability Response Integration. This enables focused remediation on assets with the most impactful security exposures due to misconfigurations and vulnerabilities.  
The Cloud Exposure View is a module that is supported by Security Exposure Management workspace. Select interactive visualizations and filter aggregated data for your cloud assets by category to view findings for your security
exposures. Cloud security teams can monitor and act on all their cloud-related security findings from multiple vendors across their cloud environments from within the workspace.

## Locating the Cloud Exposure View {#vr-cloud-exposure-view-db__section_vwy_f5n_3hc}

To view the dashboard, navigate to WorkspacesSecurity Exposure ManagementCloud Exposure View.  
Roles required:

* sn_sec_exception.read to view the workspace
* sn_vul_cmn.usem_admin to configure workspace rules
* For vulnerability findings remediation by product:

{#vr-cloud-exposure-view-db__ul_tgq_qwn_3hc} See [Security Exposure Management Workspace Roles](https://www.servicenow.com/docs/mS27GY_5bcI9PA9mfSnTgA "List of roles installed with Security Exposure Management, defining user permissions and access for Security Exposure Management-related tasks.")

## Top-level filters {#vr-cloud-exposure-view-db__section_zhf_zpt_hhc}

Locate and organize findings based on the following top-level filters to help you focus your search:

* Finding type - View security exposure findings for your cloud service accounts, cloud regions, and cloud resources with this filter.  
  Note:  
  Finding types are listed by product. You must install the corresponding applications before you can view the imported data for the following finding types:
  * HostVulnerability Response supports findings for vulnerabilities in virtual machines and servers.
  * Misconfiguration Configuration Compliance supports findings for misconfigurations in cloud resource services such as S3 and EC2. Configuration Compliance also supports findings for Issues, such as assets that are involved in toxic combinations of vulnerabilities and misconfigurations.
  * Container - Container Vulnerability Response supports container vulnerability findings.
  {#vr-cloud-exposure-view-db__ul_nlf_y4n_3hc}
* Source - View security exposures organized by the third-party scanner product integrations you have installed in your instance.
* Risk rating - View security exposures by their criticality (Critical, High, or Medium). Multi-select is supported.  
  Note:  
  Select the Settings ![Gear icon that opens configuration options.]() (gear icon). With Filters selected you can include findings with Low criticality and no imported criticality (None). You might prefer to keep the criticality in its default setting to limit your import and help you focus on your most important findings. If you modify this filter, findings that match your settings are imported with the next daily data import for all your finding types.
{#vr-cloud-exposure-view-db__ul_mcl_sqt_hhc}

## Needs attention {#vr-cloud-exposure-view-db__section_hqk_cst_hhc}

Select the totals on the cards to open a list in a new browser tab. View your most critical records organized by the applications that you have installed for the following categories.

* Unassigned findings
* Overdue findings
* Remediation due in 14 days
* Findings in review
* Select the total numbers in the cards to view a list of records.
{#vr-cloud-exposure-view-db__ul_m3v_jst_hhc}

Select a card and then select the filters on the new tabs that are displayed to view lists of findings by product: Host, Misconfiguration, and Container.

## Cloud Security Overview {#vr-cloud-exposure-view-db__section_irs_tst_hhc}

* View breakdowns of totals of active findings across cloud resource types that are categorized by provider and severity for the following assets:
  * Compute
  * Network
  * Storage
  * Other - Resources that don't fall under the other categories.
  * Select the total numbers in the cards, a provider icon, or the data visualizations to view corresponding lists of records that display total findings for each asset.
  {#vr-cloud-exposure-view-db__ul_y14_gtt_hhc}
* Select Base images or Other image types to view the five findings that have the most security exposures (Top) for the following categories:
  * Top base images with active findings
  * Top base images by risk
  * Select the total number in the card.

  {#vr-cloud-exposure-view-db__ul_qzb_qtt_hhc}  
  Container findings are color-coded for Critical, High, and Medium:
  * Red
  * Orange
  * Yellow
  {#vr-cloud-exposure-view-db__ul_klw_xtt_hhc}

  Select a data visualization graph or a colored pill to view a list of up to 1,000 records.
* Select Accounts or Regions to view the top five findings that have the most security exposures.  
  Findings are grouped by Host, Misconfigurations (Test results), Toxic combinations (Issues), and Container (Container vulnerabilities) and are color-coded for Critical, High, and Medium:
  * Red
  * Orange
  * Yellow
  {#vr-cloud-exposure-view-db__ul_up2_cvt_hhc}

  View records for your least compliant accounts under Non compliant framework. If no data is imported, this column remains unpopulated.

  Select a colored pill or View more to view a list of up to 1,000 records.
* Select from Resources or Resources - Externally Exposed to view the top five findings that have the most critical security exposures.  
  Findings are grouped by Misconfiguration (Test results) and Toxic combinations (Issues), are and Container findings and are color-coded for Critical, High, and Medium:
  * Red
  * Orange
  * Yellow
  {#vr-cloud-exposure-view-db__ul_ims_h5t_hhc}
* View toxic combinations and assets with the least compliant scores that have the most security exposures due to failed configurations. Both misconfigurations and issues are populated on test results in Configuration Compliance. This data is imported by the [Understanding the Vulnerability Response Integration with Wiz](https://www.servicenow.com/docs/aekuuwJ9iIMNyepexD5scw "Import vulnerability and compliance data from Wiz scanners into your ServiceNow AI Platform instance to help you get deeper insights into your cloud infrastructure risks. These integrations provide you with a comprehensive assessment of your overall cloud security posture and help you drive remediation actions directly from your instance."), and this data is not displayed unless Configuration Compliance and the Wiz Vulnerability Response Integration are installed.  
  Findings with failed test results are color-coded. You can select the date range for the last 7 days or the last 30 days.
  * Red
  * Orange
  * Yellow
  {#vr-cloud-exposure-view-db__ul_vp3_hb4_3hc}

  Select View more to view a list of up to 1,000 records.
{#vr-cloud-exposure-view-db__ul_v3b_ftt_hhc}

*[\>]: and then