--- sourceDocument: Brazil Security Management sourceDocumentLink: https://www.servicenow.com/docs/r/security-management Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # Vulnerability Response workspaces overview # Vulnerability Response workspaces overview {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Vulnerability Response workspaces overview The Vulnerability Response workspaces in ServiceNow provide specialized environments to manage vulnerabilities across various domains including IT infrastructure, applications, containers, and configuration compliance. These workspaces---Vulnerability Manager, IT Remediation, and Vulnerability Assessment---enable stakeholders to identify, prioritize, remediate, and track vulnerabilities efficiently using integrated data from vulnerability libraries and third-party scanners within the ServiceNow AI Platform®. Show full answer Show less ## Key Features * **Vulnerability Manager Workspace:** Enables vulnerability managers to protect assets by identifying critical vulnerabilities and misconfigurations, prioritizing them, and assigning remediation tasks to IT specialists. It supports bulk edits and offers multiple dashboards for comprehensive vulnerability management views. * **IT Remediation Workspace:** Provides IT specialists with task lists to monitor and resolve vulnerabilities using patches, rescans, change requests, exceptions, and other remediation tools within a single interface. It also includes a dedicated remediation dashboard. * **Vulnerability Assessment Workspace:** Focuses on managing critical vulnerability events proactively, such as zero-day incidents, to assess exposure and coordinate response efforts. * **Remediation Task Management:** Users can manually create, split, and request policy exceptions for remediation tasks across all workspaces to ensure flexibility in handling vulnerabilities. * **Exception and Risk Management:** Policy exceptions can be requested for vulnerable items and remediation tasks; risk reduction or modification requests can be made directly from the IT Remediation workspace. * **Vulnerability Crisis Management (VCM):** Facilitates creation and tracking of critical vulnerability events for coordinated crisis response. * **Compensating Controls:** Users can add compensating controls to a dedicated library within the Vulnerability Manager Workspace to support compliance and risk mitigation. * **Integration with Agile and Jira:** Agile and Jira issues can be created for application and container vulnerabilities directly from the Vulnerability Manager Workspace to streamline developer collaboration. ## Practical Benefits for ServiceNow Customers * Centralized management of vulnerability data and remediation tasks reduces the risk of overlooked vulnerabilities and accelerates resolution. * Role-specific workspaces enhance collaboration by tailoring views and actions to vulnerability managers, IT specialists, and event managers. * Dashboards and bulk edit features improve efficiency and visibility into vulnerability status and remediation progress. * Exception handling and risk modification capabilities provide flexibility to align with organizational policies and compliance requirements. * Support for critical event management ensures readiness and coordinated response during high-impact vulnerability disclosures. * Seamless integration with development tracking tools like Jira supports continuous improvement and application security workflows. The Vulnerability Manager and IT Remediation Workspaces support Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance. ## The Vulnerability Manager, IT Remediation, and Vulnerability Assessment Workspaces {#vulnerability-response-workspaces-overview__section_d4b_x1j_dtb} [Vulnerability Manager Workspace](https://www.servicenow.com/docs/WOWpVKcYQ5ZdCQLiQyqxlQ "The Vulnerability Manager Workspace enables vulnerability managers and analysts to monitor the vulnerabilities and misconfigurations that they care the most about and decide strategically which vulnerabilities they send to IT teams to fix.") : As a Vulnerability Manager, protect your company's assets from malware and malicious attacks. From a single work area in your ServiceNow AI Platform®, with the Vulnerability Response application, along with current vulnerability data imported into your instance from vulnerability libraries and third-party scanner data applications, identify critical vulnerabilities and misconfigurations, prioritize them, and send lists of remediation tasks over to IT for their specialists to act on. [IT Remediation Workspace](https://www.servicenow.com/docs/D9BRjYnOom_ib04Kx1nqmA "IT teams can save time resolving IT-related vulnerabilities by easily creating change requests, rescanning vulnerable items, and submitting exception requests from the IT Remediation Workspace.") : As an IT specialist, use lists, or remediation tasks (RT) sent over by vulnerability managers to monitor and resolve critical vulnerabilities assigned to you or your groups. Fix groups of vulnerable items with patches, solutions, vulnerability rescans, change requests, exceptions, and other tools to remediate vulnerable items and test results all from one location. [Vulnerability Assessment Workspace](https://www.servicenow.com/docs/QlkmEQ8cn7CeyR5wNOGqrA "The Vulnerability Assessment Workspace is designed for the Vulnerability event manager to perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event.") : As a Vulnerability event manager, perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event. ## Key features {#vulnerability-response-workspaces-overview__section_kp5_prr_5sb} The Vulnerability Response workspaces include the following features and enhancements. * Use the Bulk Edit feature in the Vulnerability Manager Workspace to update multiple records simultaneously. For more information, see [Using bulk edit in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/ATqNshBifv284d_sLKKpRQ "In the Vulnerability Manager Workspace, you can update the state of the records, request exceptions and false positives, and assign records to an assignment group multiple vulnerable items (VITs, AVITs, or CVITs) simultaneously using the bulk edit feature."). * View the Vulnerability Management (PA), Vulnerability Approvals, CISO, Container Vulnerability Management Overview, Application Vulnerability Management Dashboard, Unified Vulnerability Response, and Health dashboards in the Next Experience UI on the Dashboards page of the Vulnerability Manager Workspace. For more information, see [Dashboards page in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/v3hQ01koW4ZjCzPwjflFgw "On the Dashboards page of the Vulnerability Manager Workspace, you can view the dashboards in the Next Experience UI and use these dashboards to track and analyze the vulnerabilities."). * View the Vulnerability Remediation dashboard in the Next Experience UI on the Dashboards page of the IT Remediation Workspace. For more information, see [Dashboards page in the IT Remediation Workspace](https://www.servicenow.com/docs/5ouF5ZoGPUwVcsWJWLcRpQ "The Dashboards page in the IT Remediation Workspace provides the Vulnerability Remediation dashboard in the Next Experience UI which can be used to focus on the remediation tasks and vulnerable items."). * Create the Remediation Tasks (VUL, AVUL, CVUL, or CRG) manually in the Vulnerability Manager Workspace and IT Remediation Workspace. For more information, see [Create a remediation task manually in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/RXHzAck3S1ZPiYCYlWadQQ "Starting with v25.0.4 of Vulnerability Response, you can create remediation tasks manually from the host vulnerable items, application vulnerable items, container vulnerable items, and configuration test results lists on the List page of Vulnerability Manager Workspace. You can also create remediation tasks from the drill-down lists that appear when you click on the visualizations on the Home page.") and [Create a remediation task manually in the IT Remediation Workspace](https://www.servicenow.com/docs/~PKuEt3j~NEElyWGR0zAKA "Starting with v25.0.4 of Vulnerability Response, you can create remediation tasks manually from the Host vulnerable items, Application Vulnerable items, Container vulnerable items, and Configuration test results lists on the List page of IT Remediation Workspace."). * Split the Remediation Tasks (VUL, AVUL, CVUL, and CRG) in the Vulnerability Manager Workspace and IT Remediation Workspace. For more information, see [Request exceptions for remediation tasks and records in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/P1ROWqXCO8TTltCkL~wLXw "From the Vulnerability Manager Workspace, vulnerability managers and analysts can request exceptions and false positives for a remediation task (VUL, AVUL, CVUL or CRG) and record (VIT, CVIT, AVIT or CTR). You can also split a remediation task and create change requests.") and [Split a remediation task in the IT Remediation Workspace](https://www.servicenow.com/docs/92r4XpDp5ziUK5N4Vodv9Q "From a remediation task (VUL, AVUL, CVUL, or CRG), identify a subset of records and create a new remediation task for them.") respectively. * Request the policy exceptions for vulnerable items (VITs, AVITs, and CVITs), and Remediation Tasks (VUL, AVUL, CVUL, and CRG) in the Vulnerability Manager and IT Remediation Workspaces. For more information, see [Request exceptions for remediation tasks and records in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/P1ROWqXCO8TTltCkL~wLXw "From the Vulnerability Manager Workspace, vulnerability managers and analysts can request exceptions and false positives for a remediation task (VUL, AVUL, CVUL or CRG) and record (VIT, CVIT, AVIT or CTR). You can also split a remediation task and create change requests.") and [Request an exception using GRC: Policy and Compliance Management in the IT Remediation Workspace](https://www.servicenow.com/docs/03YHRoJKGowDgrcEeboBbg "Request a policy exception for the host vulnerable item (VIT), application vulnerable item (AVIT), container vulnerable item (CVIT) or remediation task (VUL, AVUL, CVUL, or CRG) from the IT Remediation Workspace.") respectively. * Create and track critical vulnerability events through the Vulnerability Crisis Management (VCM). For more information, see [Explore the Vulnerability Assessment Workspace](https://www.servicenow.com/docs/QlkmEQ8cn7CeyR5wNOGqrA "The Vulnerability Assessment Workspace is designed for the Vulnerability event manager to perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event."). * Add compensating controls to the Compensating controls library in the Vulnerability Manager Workspace. For more information, see [Add a compensating control to the library](https://www.servicenow.com/docs/L1aOtgbhBgTbZCoQJ6skzQ "As a Vulnerability Manager or Analyst, add a list of compensatory controls to the Compensating Controls library in the Vulnerability Manager Workspace, which can be applied for the risk reduction of host vulnerable items and remediation tasks."). * Request risk reduction for a host vulnerable item and remediation task from the IT Remediation workspace. For more information, see [Request a risk modification for a vulnerable item or remediation task](https://www.servicenow.com/docs/TfeHhlrp7IAN_Hu1PvSiVQ "Request a risk modification for a host vulnerable item or a remediation task in the IT Remediation Workspace."). * Create an agile issue and a Jira issue for application and container vulnerable items from the Vulnerability Manager Workspace. For more information, see [Create agile issue manually using form action](https://www.servicenow.com/docs/5pxYZgU1HBrx4zOFGdSXvA "Create an agile issue manually using form action. If the record is matched with any configuration rule condition, then a pop-up box will be populated with values that are selected in the configuration rule and if it does not match any criteria then the user will be allowed to select values for pre-defined fields.") and [Create agile issue manually using list action](https://www.servicenow.com/docs/d31BdItOiH~gVBBZn~uxQA "When a list action: Create Jira Issue is triggered, records that match the rule configuration criteria should be considered for “Create Jira Issue” and those records should be ingested into the sn_vul_agile_tool_manifest table with the mapping selected in the configuration rule."). {#vulnerability-response-workspaces-overview__ul_ot3_tns_byb} For more information about version compatibility with the family releases, refer to the [KB0856498 Vulnerability Response Compatibility Matrix and Release Schema Changes](https://support.servicenow.com/kb_view.do?sysparm_article=KB0856498) article in the HI Knowledge Base.