--- sourceDocument: yokohama Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/delta-xanadu-yokohama Release : - yokohama ft:locale : - en-US ft:publication_title : - yokohama Combined Product Files ft:clusterId : - delta3yx bundleId : - delta3yx --- # Combined Operational Technology Vulnerability Response release notes for upgrades from Xanadu to Yokohama # Combined Operational Technology Vulnerability Response release notes for upgrades from Xanadu to Yokohama {#ariaid-title1} Release version: Yokohama Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 10 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Operational Technology Vulnerability Response Release Notes for Upgrades from Xanadu to Yokohama This consolidated guide covers the key updates, new features, changes, deprecations, and activation instructions for ServiceNow's Operational Technology Vulnerability Response (OTVR) as customers upgrade from the Xanadu release to the Yokohama release. It is designed to help ServiceNow customers prepare for and understand the impact of upgrading their OTVR environment, focusing on practical enhancements and modifications affecting vulnerability management in Operational Technology (OT) environments. Show full answer Show less ## Key Features * **Hardware Vulnerability Assessment:** Automatically and periodically evaluates OT device firmware vulnerabilities using discovery models, including support for non-normalized data, confidence scoring, and version range assessments based on National Vulnerability Database (NVD) data. * **Enhanced Dashboards:** The OTVR (PA) dashboard and OT Vulnerability Risk Rollup dashboard provide centralized views and risk scoring of vulnerabilities at various equipment model levels within the Industrial Workspace. The Dashboard Library now includes these dashboards for easy access. * **Workflow and Role Enhancements:** Introduction of the `snotvr.remediationowner` role allows assignment of users responsible for remediation tasks and change management. Remediation tasks can now start automatically based on ISA maintenance schedules. * **Common Security Advisory Framework (CSAF) Support:** Enables importing vulnerability solutions from multiple vendors via Aggregators or Trusted Providers, enhancing integration capabilities. * **Bulk Edit Functionality:** Allows updating the Operational Technology Vulnerability Response assignment group field across multiple site records simultaneously, streamlining administrative tasks. * **Compensating Controls:** Supports applying mitigating controls for OT vulnerabilities that cannot be immediately patched, aiding risk reduction. * **Configuration Update:** From version 30.0.x, configuration tasks for OTVR are consolidated under the Unified Security Exposure Management (USEM) Workspace, improving security management workflows. * **Risk Calculator Plugin:** The Operational Technology Vulnerability Response Risk Calculator plugin can now be used directly without loading demo data, simplifying setup. * **Industrial Workspace Enhancements:** New lists for OT Vulnerable Items, Remediation Tasks, and Vulnerability Exception Approvals enable users with appropriate roles to comprehensively view and manage their OT security posture. * **Site Filtering:** Added to key dashboards to allow filtering vulnerability data by specific operational sites. ## Key Changes * Data previously shown in the OT Vulnerabilities tab on the OT Manager dashboard has been migrated to the OTVR (PA) dashboard for improved data consolidation and visualization. * The OT Vulnerabilities tab was deprecated and is no longer available starting from the Xanadu release. * Integration with Microsoft Defender for IoT (On-premises Management Console) is prepared for future deprecation; it remains supported but is hidden on new instances. ## Activation and Upgrade Guidance * Operational Technology Vulnerability Response must be installed via the ServiceNow Store. Customers should refer to the ServiceNow Store for requesting and managing the app installation. * Before upgrading to Yokohama, customers should review and complete any required pre- and post-upgrade tasks to ensure a smooth transition. ## Practical Benefits for ServiceNow Customers * Improved vulnerability assessment accuracy and scope for OT device firmware, including partial and version-range assessments. * Enhanced visibility and centralized management of OT vulnerability data, remediation tasks, and exceptions within the Industrial Workspace. * Streamlined remediation workflows supported by role-based task assignment and automation aligned with maintenance schedules. * Greater flexibility and efficiency in managing vulnerability assignments and applying compensating controls to mitigate risks. * Unified configuration experience through the USEM Workspace, aligning OT vulnerability management with broader security exposure management. Consolidated page of all release notes for Operational Technology Vulnerability Response from Xanadu to Yokohama. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Operational Technology Vulnerability Response release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Yokohama. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Operational Technology Vulnerability Response to Yokohama Before you upgrade to Yokohama, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## New features Between your current release family and Yokohama, new features were introduced for Operational Technology Vulnerability Response. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__8} | Release | Release notes | |-|-| | Xanadu | [Hardware Vulnerability Assessment menu in the Industrial Workspace](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&family=xanadu&ft:locale=en-US) : Automatically and periodically assess the OT device firmware vulnerabilities that are in your inventory and create vulnerable items against the impacted assets (CI). [Risk scores on the OT Vulnerability Risk Rollup dashboard](https://www.servicenow.com/docs/access?context=ot-risk-rollup-dashboard&family=xanadu&ft:locale=en-US) : View a table of risk scores for your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard. [Enhanced OTVR (PA) dashboard experience](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=xanadu&ft:locale=en-US) : View and manage all of your OT vulnerability data and data visualizations in a centralized location with the enhanced OTVR (PA) dashboard, which is accessible on the Dashboard Library page. [OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role](https://www.servicenow.com/docs/access?context=components-installed-with-operational-technology-vulnerability-response&family=xanadu&ft:locale=en-US) : Assign the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role to users who primarily work on an assigned remediation task and can create change tasks when needed. The OT Vulnerability Remediation Owner role contains the following roles: * cmdb_ot_isa_viewer * cmdb_ot_viewer * sn_vul.close_vi_vg * sn_vul.remediation_owner [Automatically set a start time for a remediation task based on the ISA maintenance schedule](https://www.servicenow.com/docs/access?context=create-remediation-task&family=xanadu&ft:locale=en-US) : Start a remediation task automatically based on the ISA maintenance schedule. After you create the remediation task, it's picked up during the next scheduled maintenance. [Common Security Advisory Framework (CSAF) supported for Operational Technology Vulnerability Response](https://www.servicenow.com/docs/access?context=csaf-overview&family=xanadu&ft:locale=en-US) : Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers. [OTVR (PA) dashboard Guided Setup](https://www.servicenow.com/docs/access?context=setting-up-the-otvr-pa-dashboard&family=xanadu&ft:locale=en-US) : Use the OTVR (PA) dashboard Guided Setup under the Operational Technology Vulnerability Response section in the Industrial Workspace Guided Setup to configure data collection and review indicator sources. [Change the Operational Technology Vulnerability Response (OT VR) assignment group field in a bulk edit](https://www.servicenow.com/docs/access?context=bulk-edit-assignment-group-otvr&family=xanadu&ft:locale=en-US) : Use the bulk edit feature to update the OT VR assignment group field in multiple site records at once. [Use compensating controls for Operational Technology](https://www.servicenow.com/docs/access?context=compensating-controls-for-ot&family=xanadu&ft:locale=en-US) : Use compensating controls for OT to reduce vulnerability risks that can't be patched immediately. Compensating controls help mitigate risks. | | Yokohama | [Configuring Operational Technology Vulnerability Response from the SEM Workspace](https://www.servicenow.com/docs/access?context=configuring-oper-tech-vulnerability-response&family=yokohama&ft:locale=en-US) : Starting from Operational Technology Vulnerability Response version 30.0.x, users may be redirected to the Unified Security Exposure Management (USEM) Workspace to perform some configuration tasks. The Vulnerability Response plugin is consolidated under USEM from version 30.0.x. [Demo data not required for Operational Technology Risk Calculator plugin](https://www.servicenow.com/docs/access?context=calculate-vulnerability-risk&family=yokohama&ft:locale=en-US) : You can directly access and use the Operational Technology Vulnerability Response Risk Calculator without loading the demo data while installing the plugin. In previous releases, the risk calculation was included as part of the demo data. [Enhanced features for Hardware Vulnerability Assessment for OT devices](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&family=yokohama&ft:locale=en-US) : The following enhancements are available in Hardware Vulnerability Assessment: * Assessments without Normalization: Ability to assess discovery models without content available for normalization. * Confidence Scores: New scoring mechanism for all types of assessments. * Version Range Support: The range information provided by the National Vulnerability Database (NVD) is used to create assessments without explicitly creating Common Platform Enumeration (CPEs) in the NVD. * Partial assessment for partially normalized discovery model: Creates partial assessments for discovery models without firmware version. The partial assessments are done if the other versions of the discovery model have the same publisher and model. * Expiring of assessments: If you update the firmware version of a CI, the corresponding normalized discovery model also updates. The assessment records based on the older firmware version expires while new assessments are generated for new firmware version. [Hardware Vulnerability Assessment menu in the Industrial Workspace](https://www.servicenow.com/docs/access?context=understanding-hwd-vuln-assessment&family=yokohama&ft:locale=en-US) : Automatically and periodically assess the OT device firmware vulnerabilities that are in your inventory and create vulnerable items against the impacted assets (CI). [Vulnerability risk scores on the OT Risk Management dashboard](https://www.servicenow.com/docs/access?context=otvr-risk-management-dashboard&family=yokohama&ft:locale=en-US) : View a table of vulnerability risk scores for your OT devices at each level of the equipment model with the OT Risk Management dashboard. [Enhanced OTVR (PA) dashboard experience](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=yokohama&ft:locale=en-US) : View and manage all of your OT vulnerability data and data visualizations in a centralized location with the enhanced OTVR (PA) dashboard, which is accessible on the Dashboard Library page. | [ ] ## Changes Between your current release family and Yokohama, some changes were made to existing Operational Technology Vulnerability Response features. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__14} | Release | Release notes | |-|-| | Xanadu | [OT Vulnerabilities tab data](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=xanadu&ft:locale=en-US) : The following data that was available in the OT Vulnerabilities tab of the OT Manager dashboard has been moved to the OTVR (PA) dashboard: * Total OT Vulnerable Items * New OT Vulnerable Items * OT Unassigned Vulnerable Items * OT Vulnerable Items by State * OT Vulnerable Items by Risk Rating | | Yokohama | [OT Vulnerable items list in the Industrial Workspace](https://www.servicenow.com/docs/access?context=view-solutions-of-vit-in-industrial-workspace&family=yokohama&ft:locale=en-US) : The All list was added in the OT Vulnerable Items list available in the Industrial Workspace list menu. You can use this section to view all the vulnerable items (VITs) that have been created for your OT environment. You must be assigned the user_role to view all VITs. [OT Remediation Tasks list in the Industrial Workspace](https://www.servicenow.com/docs/access?context=view-otvr-remediation-tasks-in-industrial-workspace&family=yokohama&ft:locale=en-US) : The All list was added in the OT Remediation Tasks list available in the Industrial Workspace list menu. You can use this section to view all the remediation tasks that have been created for the respective VITs in your OT environment. You must be assigned the user_role to view the remediation tasks. [OT Vulnerability Exception Approvals list in the Industrial Workspace](https://www.servicenow.com/docs/access?context=view-vulnerability-exceptions-in-industrial-workspace&family=yokohama&ft:locale=en-US) : Use this menu to view all vulnerability exceptions that have been approved by you or assigned to you. This menu enables you to view any change of state for approvals and details of requested approvals for a given exception triggered from the Industrial Workspace. [Dashboard Library icon](https://www.servicenow.com/docs/access?context=ot-manager-dashboard&family=yokohama&ft:locale=en-US) : The Dashboard Library icon () was added to the Industrial Workspace and contains the available dashboards for Operational Technology, including the OTVR (PA) dashboard. [Site filter on the OTVR (PA) dashboard and the Risk Management dashboard](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=yokohama&ft:locale=en-US) : A site filter was added to both the OTVR (PA) dashboard and the OT Risk Management dashboard in the Industrial Workspace so you can filter the displayed data by a chosen site. [Vulnerability Solutions section in the List menu of Industrial Workspace](https://www.servicenow.com/docs/access?context=view-solutions-of-vit-in-industrial-workspace&family=yokohama&ft:locale=en-US) : A new Vulnerability Solutions section was added in the List menu () of the Industrial Workspace. In the Solutions section, you can view the solutions for the enlisted VITs. [Overview tab for a vulnerable item](https://www.servicenow.com/docs/access?context=ot-vulnerable-item-fields&family=yokohama&ft:locale=en-US) : The Overview tab in a VIT provides important information about the VIT, such as State, Risk Rating, Risk Score, Associated Vulnerability, and more. [OT Vulnerabilities tab data](https://www.servicenow.com/docs/access?context=operational-technology-vulnerability-response-dashboard&family=yokohama&ft:locale=en-US) : The following data that was available in the OT Vulnerabilities tab of the OT Manager dashboard has been moved to the OTVR (PA) dashboard: * Total OT Vulnerable Items * New OT Vulnerable Items * OT Unassigned Vulnerable Items * OT Vulnerable Items by State * OT Vulnerable Items by Risk Rating | [ ] ## Removed Between your current release family and Yokohama, some Operational Technology Vulnerability Response features or functionality were removed. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__20} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Deprecations Between your current release family and Yokohama, some Operational Technology Vulnerability Response features or functionality were deprecated. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__26} | Release | Release notes | |-|-| | Xanadu | * The OT Vulnerabilities tab is no longer available on the OT Manager dashboard in the Industrial Workspace. * Starting with the Xanadu release, Vulnerability Response Integration with Microsoft Defender for IoT (On-premises Management Console) integration is being prepared for future deprecation. It will be hidden and no longer activated on new instances but will continue to be supported. | | Yokohama | * The OT Vulnerabilities tab is no longer available on the OT Manager dashboard in the Industrial Workspace. * Starting with the Yokohama release, Vulnerability Response Integration with Microsoft Defender for IoT (On-premises Management Console) integration is being prepared for future deprecation. It will be hidden and no longer activated on new instances but will continue to be supported. | [ ] ## Activation information Review information on how to activate Operational Technology Vulnerability Response. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | Install Operational Technology Vulnerability Response by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=xanadu&ft:locale=en-US). | | Yokohama | Activation information : Install Operational Technology Vulnerability Response by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: Operational Technology Vulnerability Response is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Operational Technology Vulnerability Response we have noted them here. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__38} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Operational Technology Vulnerability Response we have noted them here. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__44} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Operational Technology Vulnerability Response, such as specific requirements or compliance levels. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__50} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Operational Technology Vulnerability Response we have noted them here. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__56} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Operational Technology Vulnerability Response we have noted them here. {#dfrn3-operationaltechnologyvulnerabilityresponse-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | * Assess the vulnerabilities for the firmware of the OT assets with Hardware Vulnerability Assessment. * View solutions or details of a vulnerable item (VIT) with enhanced UI options. * Manage your vulnerable items and Operational Technology Vulnerability Response data with the enhanced OTVR (PA) dashboard in the Industrial Workspace. * View the risk score of your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard. * Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once. * Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers. * Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role. * Mitigate controls using the Libraries module in the Industrial Workspace. * Use the enhanced OTVR (PA) dashboard. See [Operational Technology Vulnerability Response](https://www.servicenow.com/docs/access?context=oper-tech-vulnerability-response-landing-page&family=xanadu&ft:locale=en-US) for more information. | | Yokohama | * Configure Operational Technology Vulnerability Response from the Security Exposure Management Workspace (SEM Workspace). * Access the Operational Technology Vulnerability Response Risk Calculator plugin directly without loading the demo data. * View all vulnerable items that have been created from the OT Vulnerable Items list in the Industrial Workspace. * View all remediation tasks that have been created from the OT Remediation Tasks list in the Industrial Workspace. * View all vulnerability exceptions that have been created from the OT Vulnerability Exception Approvals list in the Industrial Workspace. * Hardware Vulnerability Assessment is available for firmware discovery models without normalized data. * Assess the vulnerabilities for the firmware of the OT assets with Hardware Vulnerability Assessment. * View solutions or details of a vulnerable item (VIT) with enhanced UI options. * Manage your vulnerable items and Operational Technology Vulnerability Response data with the enhanced OTVR (PA) dashboard in the Industrial Workspace. * View the risk score of your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard. See [Operational Technology Vulnerability Response](https://www.servicenow.com/docs/access?context=oper-tech-vulnerability-response-landing-page&family=yokohama&ft:locale=en-US) for more information. | [ ]