Enable security jump start plugin (ACL Rules) [Updated in Security Center 1.3]
Activate the Security Jump Start (ACL Rules) (com.snc.system_securitycom.snc.system_security) plugin to create several important ACLs that validate the Access Controls on some of the key system tables within the ServiceNow AI Platform.
These rules provide a jump-start on securing many system tables, making it easier for an organization to get an instance into production. The Security Jump Start (ACL Rules) plugin is installed automatically on all new instances.
More information
| Attribute | Description |
|---|---|
| Plugin ID | com.snc.system_security |
| Configuration type | System Definition > Plugins |
| Category | Access control |
| Purpose | Activate the Security Jump Start (ACL Rules) plugin to achieve proper security
compliance. It provides some basic ACLs that secure system tables in the first place instead of creating manually for each system table that comes with default provisioning of an instance. These ACLs are helpful when the newly created instance must quickly move into production. |
| Recommended value | Active |
| Default value | None. This is a plugin, not a Glide property, so there is no default value. The plugin is installed by default on zBoot (resets). |
| Security risk rating | 8.1 |
| Functional impact | There is significant functional impact if this plugin is installed without auditing of the existing ACLs on the instance. Customer outreach and definitions are required before the remediation can occur. |
| Security risk | (High) Access control should be enforced to lock down the unintended access to the instance. ACL jumpstart rules were created to provide a starting point on securing many system tables to make it easier for an organization to quickly get into production. |
| References | Security jump start - ACL rules |