Questionnaire support in Exception Management via Smart Assessment

Configure advanced questionnaires as part of the exception management process using Smart Assessment. This allows Remediation Owners to provide more detailed context for Exception Requests and enables Approvers to configure conditional questions to gather information for informed decision making.

Roles required

Smart Assessment Template Reader: sn_vul_cmn.smart_assessment_template_manager (Vulnerability admin and Template reader) allows admins to create and edit templates.

Smart Assessment actor: sn_vul_cmn.smart_assessment_actor enables you (Remediation Owners and Admins) to fill out the questionnaires/assessments.

Smart Assessment reader: sn_vul_cmn.smart_assessment_reader enables you (Approver) to read the submitted questionnaire responses.

Pre-requisite: The smart assessment plug-ins must be installed as the Smart Assessment is a dependency on Vulnerability Response.

You can now configure questionnaires as part of the Exception Management process using Smart Assessment. It allows Vulnerability Admins/Manager to configure conditional questions to gather the right information needed for informed decision-making, while enabling Remediation Owners to provide more detailed context for exception requests. This improves collaboration between the Vulnerability Management and Remediation teams by streamlining the approval process and ensuring clarity and completeness of exception justifications.

Questionnaires and smart assessments are accessible in Workspace as well as the Classic User Interface as some workflows still require the older style questionnaires, while the new assessment is more user friendly and is only supported in Workspace.

In the Exception Management Configuration screen, you can now select the Assessment for Compensating Control, request exception and false positive records.

주:

In case you chose to complete “Assessment to request exception” field, the system allows you to consider the smart assessment template, or else the classic questionnaires are considered.

You can use the two options provided below: :

• Smart Assessment: Manage the Questionnaires in Vulnerability Workspace.
• Existing Questionnaire: You can access the existing questionnaire in both the Workspace and Classic experience.

The above templates can be accessed/edited by the Smart Assessment Template Reader: sn_vul_cmn.smart_assessment_template_manager.