Combined Security Posture Control release notes for upgrades from Yokohama to Zurich

  • Release version: Zurich
  • Updated August 11, 2026
  • 7 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Combined Security Posture Control Release Notes for Upgrades from Yokohama to Zurich

    This consolidated release notes document guides ServiceNow customers through the upgrade from the Yokohama to the Zurich release of Security Posture Control (SPC). It highlights new features, important upgrade tasks, enhancements, and changes introduced across these releases to help streamline the transition and maximize the value of SPC.

    Show full answer Show less

    New Features

    • Custom API Service Graph Connectors with Generative AI: Both Yokohama and Zurich releases introduce the ability for developers to create custom SPC API connectors using the Connector Builder Framework within the SPC workspace. This process can be accelerated using a Now Assist skill (part of the Now Assist for Vulnerability Response application) that automates steps such as API template selection, parameter population, and response field mapping via generative AI. To leverage this, Yokohama Patch 11 or Zurich Patch 4 of the Now Assist for Vulnerability Response application is required.
    • Policy and Asset Profile Enhancements: New policies and asset profiles in SPC help identify configuration gaps and overall security posture issues. These can be activated in the SPC workspace to monitor coverage and configuration compliance for key security tools including CrowdStrike, Microsoft Intune, Defender, SCCM, HCL Big Fix, SentinelOne, Qualys, and Rapid7.
    • SentinelOne Integration for Mitigation Controls Monitoring: Import mitigation control data from SentinelOne to detect controls active on assets. This complements asset and software data imported via the SentinelOne Service Graph Connector to enhance security tool coverage monitoring.
    • Netskope Integration: Import hardware and software asset inventory data from Netskope into the ServiceNow Configuration Management Database (CMDB) to enrich asset visibility.

    Changes

    • SPC now depends on service graph connector data stored in the CMDB 360 Data [cmdbmultisourcedata] table, which requires enabling the system property glide.identificationengine.multisourceenabled (modifiable only by users with the cmdbmsadmin role).
    • Interface improvements include more descriptive labels on mitigation control detail forms related to vulnerable item records, such as expanding “EDR” to “Endpoint Protection” for enhanced clarity and usability.

    Removals and Deprecations

    No features or functionality were removed or deprecated between Yokohama and Zurich releases.

    Activation and Installation

    • Security Posture Control must be installed by requesting the required applications from the ServiceNow Store. Installation instructions remain consistent from Yokohama through Zurich releases.

    Additional Considerations

    • No new browser, accessibility, or localization requirements have been introduced between these releases.
    • Helpful tips include using the now consolidated release notes page to track updates across SPC’s cross-family releases, and noting that if no updates occurred for a release, a corresponding note is provided.

    Practical Benefits for ServiceNow Customers

    Upgrading to Zurich enhances your ability to build tailored integrations with security tools using AI-assisted API connectors, improving automation and reducing development time. Enhanced policies and asset profiles provide deeper insights into security posture and configuration gaps, enabling proactive risk management. The integrations with SentinelOne and Netskope allow for richer asset data importation and mitigation control monitoring, empowering cybersecurity teams to maintain comprehensive security tool coverage and compliance visibility across enterprise assets.

    Consolidated page of all release notes for Security Posture Control from Yokohama to Zurich.

    How to use this page

    To help you prepare for your upgrade, we have combined the cross-family Security Posture Control release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Zurich.

    Tip:
    If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

    Important information for upgrading Security Posture Control to Zurich

    Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed.

    Release Release notes

    Yokohama

    For a complete list of the applications that are required to implement Security Posture Control, see Install Security Posture Control.

    Zurich

    For a complete list of the applications that are required to implement Security Posture Control, see Install Security Posture Control.

    New features

    Between your current release family and Zurich, new features were introduced for Security Posture Control.

    Release Release notes

    Yokohama
    Create a custom API service graph connector in the Security Posture Control workspace
    Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the Security Posture Control workspace. With a Now Assist skill that is included with the Now Assist for Vulnerability Response application, your developers have the option to automate steps in the Connector builder framework.
    • You have the option to automate the steps for selecting API templates, populating request and header parameters, and response field mapping with generative AI.
      Note:
      You must install Yokohama Patch 11 of the Now Assist for Vulnerability Response application to have access to the generative AI skill for the Connector builder framework. See the Now Assist for Security Incident Response release notes and Supporting information for more information.
    • Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment.
    • Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build.
    Enhancements to policies and asset profiles included with the Security Posture Control application
    Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage for the following tools:
    • CrowdStrike
    • Microsoft Intune, Defender, and SCCM
    • HCL Big Fix
    • SentinelOne
    • Qualys
    • Rapid7
    SentinelOne integration for mitigation controls monitoring
    You can import SentinelOne mitigation controls data with this integration to help you detect which mitigation controls are on your assets. Use this integration with the asset and software data that you import with the SentinelOne Service Graph Connector to help you monitor your security tool coverage on your enterprise assets.
    Netskope
    This product pulls in asset inventory data for hardware and software from the Netskope database into the ServiceNow Configuration Management Database (CMDB) application.

    Zurich
    Create a custom API service graph connector in the Security Posture Control workspace
    Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the Security Posture Control workspace. With a Now Assist skill that is included with the Now Assist for Vulnerability Response application, your developers have the option to automate steps in the Connector builder framework.
    • You have the option to automate the steps for selecting API templates, populating request and header parameters, and response field mapping with generative AI.
      Note:
      You must install Zurich Patch 4 of the Now Assist for Vulnerability Response application to have access to the generative AI skill for the Connector builder framework. See the Now Assist for Security Incident Response (SIR) release notes and Supporting information for more information.
    • Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment.
    • Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build.
    Enhancements to policies and asset profiles included with the Security Posture Control application
    Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage for the following tools:
    • CrowdStrike
    • Microsoft Intune, Defender, and SCCM
    • HCL Big Fix
    • SentinelOne
    • Qualys
    • Rapid7

    Changes

    Between your current release family and Zurich, some changes were made to existing Security Posture Control features.

    Release Release notes

    Yokohama

    		 No updates for this release.

    Zurich
    • Security Posture Control relies on data from service graph connectors that is populated in the CMDB 360 Data [cmdb_multisource_data] table. This data is populated only when the glide.identification_engine.multisource_enabled system property is set to true. You must have the cmdb_ms_admin role to modify property values. To set the property, navigate to All > Configuration > CMDB 360 Properties.
    • The labels on the form view for the mitigation control details record associated with vulnerable item records (VITs) have been enhanced for more clarity. These updates make the interface more user-friendly by expanding abbreviations on the form view, such as changing "EDR" to "Endpoint Protection."

    Removed

    Between your current release family and Zurich, some Security Posture Control features or functionality were removed.

    Release Release notes

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Deprecations

    Between your current release family and Zurich, some Security Posture Control features or functionality were deprecated.

    Release Release notes

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Activation information

    Review information on how to activate Security Posture Control.

    Release Release notes

    Yokohama

    Install Security Posture Control by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Zurich

    Install Security Posture Control by requesting the required applications from the ServiceNow Store.

    Additional requirements

    If any additional requirements were introduced or changed for Security Posture Control we have noted them here.

    Release Release notes

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Browser requirements

    If any specific browser requirements were introduced or changed for Security Posture Control we have noted them here.

    Release Release notes

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Accessibility information

    Review details on accessibility information for Security Posture Control, such as specific requirements or compliance levels.

    Release Release notes

    Yokohama

    		 No updates for this release.

    Zurich

    Localization information

    If there are specific localization considerations for Security Posture Control we have noted them here.

    Release Release notes

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Highlight information

    If there are specific highlight considerations for Security Posture Control we have noted them here.

    Release Release notes

    Yokohama
    • Create and publish your own API connectors with a step-by-step process in the Connector builder module in the Security Posture Control workspace. You can use generative AI to automate some steps. See the Now Assist for Security Incident Response release notes for more information about the Now Assist skill.
    • Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application.
    • Use the policies included with the application or custom policies that you create to monitor your assets for overall security tool coverage, compliance with internal configuration standards, critical combinations of security gaps and vulnerabilities, and possible internet exposure.

    See Security Posture Control for more information.

    Zurich
    • Create and publish your own API connectors with a step-by-step process in the Connector builder module in the Security Posture Control workspace. You can use generative AI to automate some steps. See the Now Assist for Security Incident Response (SIR) release notes for more information about the Now Assist skill.
    • Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application.
    • Use the policies included with the application or custom policies that you create to monitor your assets for overall security tool coverage, compliance with internal configuration standards, critical combinations of security gaps and vulnerabilities, and possible internet exposure.

    See Security Posture Control for more information.