Combined Operational Technology Vulnerability Response release notes for upgrades from Vancouver to Xanadu

How to use this page

To help you prepare for your upgrade, we have combined the cross-family Operational Technology Vulnerability Response release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Vancouver to Xanadu.

Tip:

If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

Important information for upgrading Operational Technology Vulnerability Response to Xanadu

Before you upgrade to Xanadu, review these pre- and post-upgrade tasks and complete the tasks as needed.


Release	Release notes
Vancouver	No updates for this release.
Washington DC	No updates for this release.
Xanadu	No updates for this release.

New features

Between your current release family and Xanadu, new features were introduced for Operational Technology Vulnerability Response.


Release	Release notes
Vancouver	Create a change request from a remediation task Create a change request from the related remediation task form to view the related change record in the remediation task record. OT Vulnerabilities landing page tab Track your OT vulnerability data with multi-site and business unit filtering by using the OT Vulnerabilities landing page tab in the Industrial Workspace. This landing page tab now runs in Performance Analytics. Implementing multi-site and business unit filtering in the OT Vulnerabilities landing page Filter the data based on the specific business units and sites by using the business unit and site filters in the OT Vulnerabilities landing page tab. Operational Technology Vulnerability Response (PA) dashboard Track the volume, performance, and progress of the OT vulnerable items (VIs) from the initial analysis and detection to the containment, or remediation, for a VI by using the Operational Technology Vulnerability Response (PA) dashboard.
Washington DC	OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role Assign the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role to users who primarily work on an assigned remediation task and can create change tasks when needed. The OT Vulnerability Remediation Owner role contains the following roles: cmdb_ot_isa_viewer cmdb_ot_viewer sn_vul.close_vi_vg sn_vul.remediation_owner Automatically set a start time for a remediation task based on the ISA maintenance schedule Start a remediation task automatically based on the ISA maintenance schedule. After you create the remediation task, it’s picked up during the next scheduled maintenance. View unmapped devices and devices not assigned to a site in the OT Vulnerabilities tab of the OT Manager dashboard View the unmapped OT devices and OT devices that aren't assigned to a site in the No Site Assigned table included in the Vulnerability Risk widget. Common Security Advisory Framework (CSAF) supported for Operational Technology Vulnerability Response Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers. OTVR (PA) dashboard Guided Setup Use the OTVR (PA) dashboard Guided Setup under the Operational Technology Vulnerability Response section in the Industrial Workspace Guided Setup to configure data collection and review indicator sources. Change the Operational Technology Vulnerability Response (OT VR) assignment group field in a bulk edit Use the bulk edit feature to update the OT VR assignment group field in multiple site records at once. Use compensating controls for Operational Technology Use compensating controls for OT to reduce vulnerability risks that can't be patched immediately. Compensating controls help mitigate risks. OT Vulnerabilities tab Track your OT vulnerability data with multi-site and business unit filtering by using the OT Vulnerabilities tab in the Industrial Workspace. This tab now runs in Performance Analytics. Implementing multi-site and business unit filtering in the OT Vulnerabilities tab Filter the data based on the specific business units and sites by using the business unit and site filters in the OT Vulnerabilities tab. Operational Technology Vulnerability Response (PA) dashboard Track the volume, performance, and progress of the OT vulnerable items (VIs) from the initial analysis and detection to the containment, or remediation, for a VI by using the Operational Technology Vulnerability Response (PA) dashboard.
Xanadu	Hardware Vulnerability Assessment menu in the Industrial Workspace Automatically and periodically assess the OT device firmware vulnerabilities that are in your inventory and create vulnerable items against the impacted assets (CI). Risk scores on the OT Vulnerability Risk Rollup dashboard View a table of risk scores for your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard. Enhanced OTVR (PA) dashboard experience View and manage all of your OT vulnerability data and data visualizations in a centralized location with the enhanced OTVR (PA) dashboard, which is accessible on the Dashboard Library page. OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role Assign the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role to users who primarily work on an assigned remediation task and can create change tasks when needed. The OT Vulnerability Remediation Owner role contains the following roles: cmdb_ot_isa_viewer cmdb_ot_viewer sn_vul.close_vi_vg sn_vul.remediation_owner Automatically set a start time for a remediation task based on the ISA maintenance schedule Start a remediation task automatically based on the ISA maintenance schedule. After you create the remediation task, it’s picked up during the next scheduled maintenance. Common Security Advisory Framework (CSAF) supported for Operational Technology Vulnerability Response Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers. OTVR (PA) dashboard Guided Setup Use the OTVR (PA) dashboard Guided Setup under the Operational Technology Vulnerability Response section in the Industrial Workspace Guided Setup to configure data collection and review indicator sources. Change the Operational Technology Vulnerability Response (OT VR) assignment group field in a bulk edit Use the bulk edit feature to update the OT VR assignment group field in multiple site records at once. Use compensating controls for Operational Technology Use compensating controls for OT to reduce vulnerability risks that can't be patched immediately. Compensating controls help mitigate risks.

Changes

Between your current release family and Xanadu, some changes were made to existing Operational Technology Vulnerability Response features.


Release	Release notes
Vancouver	New Industrial Workspace landing page experience The Industrial Workspace landing page was split up into the following tabs so that you can separately monitor your OT device data and OT vulnerability data: OT Devices landing page tab OT Vulnerabilities landing page tab
Washington DC	New Industrial Workspace experience The OT Manager dashboard in the Industrial Workspace was split up into the following tabs so that you can separately monitor your OT device data and OT vulnerability data: OT Devices tab OT Vulnerabilities tab
Xanadu	OT Vulnerabilities tab data The following data that was available in the OT Vulnerabilities tab of the OT Manager dashboard has been moved to the OTVR (PA) dashboard: Total OT Vulnerable Items New OT Vulnerable Items OT Unassigned Vulnerable Items OT Vulnerable Items by State OT Vulnerable Items by Risk Rating

Removed

Between your current release family and Xanadu, some Operational Technology Vulnerability Response features or functionality were removed.


Release	Release notes
Vancouver	No updates for this release.
Washington DC	No updates for this release.
Xanadu	No updates for this release.

Deprecations

Between your current release family and Xanadu, some Operational Technology Vulnerability Response features or functionality were deprecated.


Release	Release notes
Vancouver	No updates for this release.
Washington DC	No updates for this release.
Xanadu	The OT Vulnerabilities tab is no longer available on the OT Manager dashboard in the Industrial Workspace. Starting with the Xanadu release, Vulnerability Response Integration with Microsoft Defender for IoT (On-premises Management Console) integration is being prepared for future deprecation. It will be hidden and no longer activated on new instances but will continue to be supported.

Activation information

Review information on how to activate Operational Technology Vulnerability Response.


Release	Release notes
Vancouver	Install Operational Technology Vulnerability Response by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
Washington DC	Install Operational Technology Vulnerability Response by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
Xanadu	Install Operational Technology Vulnerability Response by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Additional requirements

If any additional requirements were introduced or changed for Operational Technology Vulnerability Response we have noted them here.


Release	Release notes
Vancouver	No updates for this release.
Washington DC	No updates for this release.
Xanadu	No updates for this release.

Browser requirements

If any specific browser requirements were introduced or changed for Operational Technology Vulnerability Response we have noted them here.


Release	Release notes
Vancouver	No updates for this release.
Washington DC	No updates for this release.
Xanadu	No updates for this release.

Accessibility information

Review details on accessibility information for Operational Technology Vulnerability Response, such as specific requirements or compliance levels.


Release	Release notes
Vancouver	No updates for this release.
Washington DC	No updates for this release.
Xanadu	No updates for this release.

Localization information

If there are specific localization considerations for Operational Technology Vulnerability Response we have noted them here.


Release	Release notes
Vancouver	No updates for this release.
Washington DC	No updates for this release.
Xanadu	No updates for this release.

Highlight information

If there are specific highlight considerations for Operational Technology Vulnerability Response we have noted them here.


Release	Release notes
Vancouver	Create an OT Change request from an OT remediation task. Monitor your vulnerability data in a centralized location with the new OT Vulnerabilities landing page tab that is available in the Industrial Workspace. Track the volume, performance, and progress of OT vulnerable items (VIs) from the initial analysis and detection to the containment, or remediation, with the new Operational Technology Vulnerability Response (PA) dashboard in the Industrial Workspace. See Operational Technology Vulnerability Response for more information.
Washington DC	Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once. Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers. Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role. Mitigate controls using the Libraries module in the Industrial Workspace. Use the enhanced OTVR (PA) dashboard. Monitor your vulnerability data in a centralized location with the new OT Vulnerabilities tab that is available in the Industrial Workspace. Track the volume, performance, and progress of OT vulnerable items (VIs) from the initial analysis and detection to the containment, or remediation, with the new Operational Technology Vulnerability Response (PA) dashboard in the Industrial Workspace. See Operational Technology Vulnerability Response for more information.
Xanadu	Assess the vulnerabilities for the firmware of the OT assets with Hardware Vulnerability Assessment. View solutions or details of a vulnerable item (VIT) with enhanced UI options. Manage your vulnerable items and Operational Technology Vulnerability Response data with the enhanced OTVR (PA) dashboard in the Industrial Workspace. View the risk score of your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard. Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once. Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers. Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role. Mitigate controls using the Libraries module in the Industrial Workspace. Use the enhanced OTVR (PA) dashboard. See Operational Technology Vulnerability Response for more information.