Defer a Remediation task

If you determine that the issue associated with a remediation task (VUL) is a low priority and can be immediately deferred without further analysis, you can use the Request Exception feature.

Before you begin

Role required: sn_vul.vulnerability_admin or sn_vul.admin (deprecated)

About this task

You can defer a remediation task from a remediation task record in the Vulnerability Response Workspaces. After you submit the request, it is sent for approval. See Request an exception in the IT Remediation Workspace.

A scheduled job runs every day checking for deferred remediation tasks that have reached their reopen date. On the day the task's deferral is set to expire, the task is reopened.

Note:

You can manually move change requests and remediation tasks through the states of their life cycles on their respective records with state synchronization enabled, but when the system registers that a CHG has changed its state, or you add a CHG or remove it from a remediation task, state synchronization potentially can override your manual intervention. However, change request states do not automatically move remediation tasks from the Closed or Deferred states.

Procedure

1. Navigate to All > Vulnerability Response > Remediation Tasks.
2. Open a record.
3. Click Request Exception.
4. Fill in the fields on the form, as appropriate.

   Field	Description
   Until	Select the date when the Defer state expires and the remediation task is reactivated. After the record is submitted, if email notifications are defined, members of the Vulnerability Response group receive an email when the expiration date is within one week. When the defer date expires, the remediation task is set back to Open and a second email notification is sent out.
   Reason	Enter the reason for deferring the issue. Choices include: Awaiting maintenance window False positive Fix unavailable Risk accepted Mitigating control in place Other
   Additional information	Enter any other relevant information.

5. Click Submit.
   The group is marked In Review. A Reopen related link appears. The reopen date and reason appear in work notes under the State Change Approvals tab.

• Request an extension for a deferred remediation task
  Request an extension for a deferred remediation task (VUL) before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.