Request an extension for a deferred application vulnerable item in Application Vulnerability Response

Request an extension for a deferred application vulnerable item before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.

Before you begin

Role required: sn_vul.vulnerability_admin or sn_vul.admin (deprecated)

About this task

You can also request an extension from the Vulnerability Response Workspaces. For more information, see Request an extension for a deferred vulnerable item in the Vulnerability Manager workspace.

Procedure

1. Navigate to All > Application Vulnerability Response > Vulnerable Items.
2. Open a deferred application vulnerable item.
3. Select Request Extension.
   Note:

   The Request Extension button is visible only when the state of the application vulnerable item is Deferred.
4. Fill in the fields on the form, as appropriate.

   Field	Description
   Extend Until	Select the date until when the deferred application vulnerable item must be extended for remediation.
   Reason	Enter the reason for deferring the issue. Choices include: Awaiting maintenance window Fix unavailable Risk accepted Mitigating control in place Other
   Additional information	Enter any other relevant information.

5. Select Request Approval.
   An email is triggered on submission of the request and subsequent action by the approver.

   Note:

   • The request goes through two levels of approval.
   • If a deferred exception rule is extended again, the extend deferral count increases in the backend.
6. After the request is approved, the Until, Reason, and Deferral notes are updated.