Create a custom Common Platform Enumeration (CPE) mapping for firmware in your operational technology (OT) assets

If the CPE mapping for firmware that is embedded into your OT assets isn't already represented in the Enterprise Asset Management Content Service, create a custom CPE mapping.

始める前に

重要:

You can create custom CPE mappings only using the OT Asset Workspace. To use the OT Asset Workspace, install the OT Asset Management application on your ServiceNow instance. See Install OT Asset Management for detailed instructions.

Role required: sn_eam.enterprise_admin

このタスクについて

CPE is a standardized naming scheme that enables you to map your information technology (IT) systems, software, and packages to corresponding vulnerability management data in the National Vulnerability Database (NVD). You can use these mappings to identify and mitigate potential vulnerabilities across your IT infrastructure. All official CPE names are listed in the CPE Product Dictionary, which is hosted and maintained by the National Institute of Standards and Technology (NIST).

手順

1. Navigate to All > OT Asset Workspace > Normalization.
2. Select the Custom firmware CPE tab.
3. Select New.
4. On the form, fill in the fields.

   表 : 1. Create New Custom firmware CPE mapping form

   Field	Description
   Firmware product	Firmware product that you want to map to vulnerability management data in the NVD.
   Firmware version	Version of the firmware product that you want to map to vulnerability management data in the NVD.
   CPE publisher	Publisher of the firmware product, as listed in the CPE Product Dictionary.
   CPE product	Name of the firmware product, as listed in the CPE Product Dictionary.
   CPE version	Version of the firmware product, as listed in the CPE Product Dictionary.

5. Select Save.