Create or edit Application Vulnerability Response assignment rules

You can create rules to automatically assign application vulnerable items (AVIs) based on filter conditions. These rules assign AVIs as they are imported or manually created.

始める前に

Role required: App-Sec Manager group

このタスクについて

With assignment rules, you define the condition of assignment and the order of execution. Once an AVI matches a rule condition, the assignment lookup stops. See Filtering within Application Vulnerability Management for more information.

手順

1. Navigate to All > Application Vulnerability Response > Administration > Assignment Rules.
2. Click New.
3. If New, fill in the fields on the form, as appropriate.

   表 : 1. Application Vulnerability Assignment Rule

   Field	Description
   Name	Name of the group rule.
   Active	Indicates whether the assignment rule is active.
   Execution order	Order in which the rules are evaluated. High priority rules, items that need special handling, where risk is critical, or an AVI should be handled by regulatory compliance, to be run first. Next, run your general rules, where no special handling is required, and you know who should be responsible for them. Finally, create a default rule to assign AVIs to the group that will figure out what assignment group it should belong to. This group could add another rule to cover their decisions. This default rule would run last.
   Description	Description of the assignment rule.
   Condition
   Condition fields	Conditions that must be met.
   New Criteria	Adds more condition filter fields to choose from.
   Assign using	To automate the assignment of groups created based on this rule, choose one of the options available. User group: Select a user group from the lookup table. User group field: Select a user group field from the list menu. Script: Create or edit a script. 注: Creating or edit a script requires ServiceNow expertise.

4. Click Submit.
   New or updated rules are evaluated on the next import.