Create a change request in the Remediation view

From a remediation task (VUL, AVUL, CVUL, or CRG), create a change request. Alternatively, add a remediation task to an existing change request.

Before you begin

Role required:

• sn_vul.remediation_owner for host vulnerable items (VITs)
• sn_vul.app_security_champion for application vulnerable items (AVITs)
• sn_vul_container.remediation_owner for container vulnerable items (CVITs)
• sn_vulc.remediation_owner for configuration test results (CTRs)

Note:

The itil role is required if you want to submit change requests from the Remediation view.

About this task

For more information about the change requests and creating change requests from the classic environment, see Change management for Vulnerability Response.

Procedure

1. Navigate to Workspaces > Security Exposure Management > Remediation.
2. Open a remediation task (VUL, AVUL, CVUL, or CRG) that you want to create a change request for.
3. Select Create Change to create a change request.
   1. Fill in the fields on the change request form.
      For information on the form fields, see Create change request form fields.
   2. Select Create Change Request.
4. Optional: To add this remediation task to an existing change request instead, expand the Create Change button and select Add to existing change.
   1. Select the search icon to view the list of existing change requests.
      • You can filter the list using the filter icon and the Advanced view condition builder.
      • To include configuration items from all active vulnerable items in the change request, select the Add CIs to CR check box.
   2. Select a change request from the list.
   3. Select Add change.

Result

The remediation task record opens and a message indicates that the change request is created or the remediation task is added to an existing change request.

• Select the View change link in the message to open the change request (CHG) record.
• Select the Change Requests related item menu link on the remediation task record to view all the change requests associated with the record.

When you submit the change and it is implemented, if state synchronization is enabled, the remediation task automatically moves to Resolved. For more information about states and state synchronization in change requests, see Create a change request from a remediation task.