Installation of Vulnerability Response and supported applications

The Vulnerability Response application is available from the ServiceNow Store. The application supports other ServiceNow applications and third-party integrations that you also download from the ServiceNow Store. More options also are available to extend the basic setup.

Tasks for basic setup

The Vulnerability Response application is required as a first step. For more information about installing it, see Implementation checklist for the Vulnerability Response application and Install the Vulnerability Response application.

• After installation is completed, you can Configure Vulnerability Response using Setup Assistant.

  With the Setup Assistant, assign users and groups for access to the application, create or edit assignment rules, remediation task rules, and target dates, set up risk calculators.

• You can also select, install, and configure one or more supported third-party integrations from the Setup Assistant. These integrations retrieve vulnerability data from external systems and vendors. For more information about how integrations work and the integrations supported by Vulnerability Response, see Vulnerability Response integrations.
• Prior to implementing any third-party integrations, run the NVD integration and CWE scheduled job as part of your initial setup of Vulnerability Response.

  See Importing data with the NVD and CWE integrations and managing third-party libraries and Configure and run the scheduled job for updating CWE records for more information about installing, configuring, and viewing the NVD and CWE libraries.

• Select an analytics application, when applicable. The Performance Analytics Content Pack for Vulnerability Response application contains reports that cover all stages of the vulnerability management lifecycle.

  [Optional] Install and configure the Performance Analytics for Vulnerability Response [PA] application application.

• Select a solutions application, when applicable. Solution management helps you correlate the vulnerabilities in your environment with the solutions that could remediate them. [Optional] Install the Solution Management for Vulnerability Response application.
  Note:

  • When the Vulnerability Solution Management application is enabled, the Microsoft Security Response Center Solution Integration and the Red Hat Solution Integration are available to edit in Setup Assistant.

  • Vulnerability Solution Management requires a separate subscription. For more information, see Vulnerability Solution Management.

• [Optional] Install the ServiceNow Agent app and the Vulnerability Response Mobile app for the Mobile experience for Vulnerability Response.

Other setup tasks you can perform

These additional setup tasks add to your basic configuration and support remediation with options for reporting, email notifications, native integration configuration, and working with vulnerable items. Most of these tasks are performed outside of the Setup Assistant. See Additional Vulnerability Response setup and configuration tasks.

Advanced tasks outside of the basic setup

These optional configuration tasks are performed outside of Setup Assistant and require coding or advanced ServiceNow expertise and are not considered part of the basic configuration. See Advanced Vulnerability Response configuration tasks.