--- sourceDocument: Brazil Operational Technology Management sourceDocumentLink: https://www.servicenow.com/docs/r/operational-technology Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Operational Technology Management ft:clusterId : - optm bundleId : - optm workflow : - Technology --- # Configure # Configuring Operational Technology Vulnerability Response {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Configuring Operational Technology Vulnerability Response This guide outlines the steps to configure the Operational Technology (OT) Vulnerability Response application in ServiceNow, enabling effective management of vulnerabilities in OT environments. The configuration process includes setting up assignment rules, remediation targets, risk calculators, risk rollup calculations, and integrating certified third-party applications. The Industrial Guided Setup tool assists administrators through the setup, directing some tasks to the Security Exposure Management (SEM) Workspace, part of ServiceNow's Unified Security Exposure Management (USEM) platform. Show full answer Show less ## Key Configuration Steps * **Install the Application:** Install Operational Technology Vulnerability Response from the ServiceNow Store, including demo data and related plugins. * **Assign Roles:** Grant appropriate roles to admin users and OT Vulnerability Remediation Owners to control access and capabilities within the application. * **Create Site Assignment Groups:** Establish assignment groups per site defined in the Equipment Model Manager, restricting OT Remediation Owners to view vulnerable items relevant to their site. * **Assign Users to Sites and Groups:** Link users holding roles like cmdbotisaviewer or cmdbotisaeditor to sites and corresponding assignment groups, ensuring visibility of vulnerability items is site-specific. * **Configure Vulnerability and Remediation Rules:** Set rules for assigning OT vulnerable items to groups and define remediation targets and timeframes. Update remediation task rules in the Industrial Workspace to prevent automatic addition of OT devices to remediation tasks. * **Set Risk Calculators:** Choose OT risk factors for calculating individual vulnerable item risk and configure the OT vulnerability risk rollup calculator to aggregate risk scores across equipment model hierarchies. * **Install Certified Integrations:** Integrate third-party certified applications to enhance OT vulnerability management functionality. ## Why It Matters Configuring OT Vulnerability Response properly ensures that remediation efforts are targeted, roles and access are appropriately controlled, and risk is accurately assessed and aggregated. Leveraging the SEM Workspace centralizes security exposure management, providing real-time visibility and streamlined workflows for OT vulnerability handling. ## What to Expect * Controlled access to vulnerability data and remediation tasks based on site and role assignments. * Automated assignment of vulnerable items and clear remediation targets to guide response efforts. * Accurate risk scoring at device and equipment model levels to prioritize vulnerabilities effectively. * Enhanced functionality through certified third-party integrations supporting comprehensive OT vulnerability management. Configure Operational Technology (OT) assignment rules, remediation targets, risk calculators, and risk rollup calculation then configure integrations to create vulnerable item records. Note: If you have the sn_vul.vulnerability_admin role, you can use the Industrial Guided Setup to lead you through the setup of the Operational Technology Vulnerability Response application. To access the Guided Setup, navigate to Industrial Workspace AdminGuided Setup. {#configuring-oper-tech-vulnerability-response__table_dt5_rxj_4nb__entry__2} | Task | Purpose | |-|-| | 1. Install Operational Technology Vulnerability Response from the ServiceNow Store. | Install the Operational Technology Vulnerability Response application. | | 2. Assign roles to admin users  or user groups, if needed. | Assigns roles to control the actions that are available for each user. | | 3. Assign roles for the OT Vulnerability Remediation Owner. | Assigns roles to control the actions that are available for the OT Vulnerability Remediation Owner. | | 4. Create assignment groups and assign users to sites and groups. 1. Create an Operational Technology Vulnerability Response site assignment group for each site that you have in the Equipment Model Manager. 2. Assign users who already have either the cmdb_ot_isa_viewer or cmdb_ot_isa_editor role to sites. 3. Add users to the assignment group for their site. {#configuring-oper-tech-vulnerability-response__ol_rfp_jjq_3rb} | * Allows OT Remediation Owner users to see only vulnerable Items for their site. * Allows users to see the Vulnerability Items for the sites they're assigned to. {#configuring-oper-tech-vulnerability-response__ol_otn_qjq_3rb} | | 5. Configure OT remediation target rules. | * Assigns OT vulnerable items to site-level groups, or groups based on classification. * Defines the expected timeframe for remediating vulnerable items. {#configuring-oper-tech-vulnerability-response__ul_dsl_czq_3rb} | | 6. Load the demo data records for the Operational Technology Vulnerability Response application. | Calculates the remediation target for OT vulnerable items. | | 7. Configure OT risk calculators. | Determines which OT risk factors to use when calculating the risk of a vulnerable item on an OT device. | | 8. Configure OT risk roll up calculator. | Calculates the risk score of the OT devices at each level for the equipment model entity. | | 9. Install Operational Technology Certified integrations for the Operational Technology Vulnerability Response application that are applicable to your environment. | Integrates certified third-party applications that enhance functionality of OT vulnerability management. | [ ] {#configuring-oper-tech-vulnerability-response__table_dt5_rxj_4nb} In tasks 5,7, and 8, the guided setup redirects you to the Security Exposure Management Workspace (SEM Workspace). The SEM Workspace is part of ServiceNow's next-generation platform, Unified Security Exposure Management (USEM). USEM consolidates multiple security exposure applications---Vulnerability Response (VR), Application Vulnerability Response (AVR), Container Vulnerability Response (CVR), and Configuration Compliance (CC)---into a unified architecture. It provides a single source of truth for security exposure, enabling real-time visibility, streamlined workflows, and automated remediation through the SEM Workspace. The SEM Workspace is available for Security Operations Vulnerability Response from version 30.0.0. As Vulnerability Response is now consolidated under USEM, starting from Operational Technology Vulnerability Response version 2.0.0, users may be redirected to the SEM Workspace to perform some configuration tasks. * **[Install Operational Technology Vulnerability Response](https://www.servicenow.com/docs/4mGnTvkZrRJQcFG1Y9PTlA)** Install the Operational Technology Vulnerability Response application if you have the admin role. This application includes demo data and installs the related store applications and plugins if they are not already installed. * **[Assign Operational Technology Vulnerability Response roles](https://www.servicenow.com/docs/VUcdsRWlKBXeFuPUrBcg7g)** Assign roles to your users so that you can control their access to the features, capabilities, and data in the Operational Technology Vulnerability Response application. * **[Create a site assignment group](https://www.servicenow.com/docs/L5cMDT2bX1za_6eZc_MF~Q)** Create one Operational Technology Vulnerability Response assignment group per site that you have in the Equipment Model Manager. This allows OT Remediation Owner users to only see vulnerable items for their site. * **[Assign users to sites](https://www.servicenow.com/docs/be_q65pQ3Uv8hCY03Y1C8Q)** If you have not already done so during configuration of the Industrial Process Manager, assign users who already have either the cmdb_ot_isa_viewer or cmdb_ot_isa_editor role to sites. * **[Assign users to assignment groups](https://www.servicenow.com/docs/jn~XAhxu0EsCOGxns5LP~Q)** Add users to assignment groups so they can see the vulnerability items for their assigned site. * **[Assign vulnerable items to groups](https://www.servicenow.com/docs/mVTgvZMBqhL7QV_jn1LcxA)** Configure OT Vulnerability assignment rules. * **[Configure OT remediation task rules](https://www.servicenow.com/docs/~~GScIF4smv_oKnUgfJtsw)** For remediation tasks that are created in the Industrial Workspace, update existing remediation task rules to prevent imported vulnerable items from automatically adding OT devices. * **[Configure OT remediation target rules](https://www.servicenow.com/docs/x0S4yTf9weWeUnVcvXrUtg)** Configure remediation target rules for OT vulnerable items. * **[Configure risk calculators](https://www.servicenow.com/docs/OLziTKWd0COtoRfgS5UYdg)** Determine which OT risk factors to use when calculating the risk of a vulnerable item on an OT device. * **[Configure OT vulnerability risk rollup calculator](https://www.servicenow.com/docs/TBfs7bR57K13mtvKQuh3RA)** Use the OT vulnerability risk rollup calculator to calculate the risk score of the OT devices at each level of the equipment model. The overall risk score is rolled up to the parent equipment model entity. * **[Install certified Vulnerability Response integrations](https://www.servicenow.com/docs/GhH4URpDxywKkdhamg2bxQ)** Integrate certified third-party applications that enhance functionality of OT vulnerability management. *[\>]: and then