--- sourceDocument: zurich Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/delta-yokohama-zurich Release : - zurich ft:locale : - en-US ft:publication_title : - zurich Combined Product Files ft:clusterId : - delta3zy bundleId : - delta3zy --- # Combined Security Posture Control release notes for upgrades from Yokohama to Zurich # Combined Security Posture Control release notes for upgrades from Yokohama to Zurich {#ariaid-title1} Release version: Zurich Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 8 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Security Posture Control Release Notes for Upgrades from Yokohama to Zurich This consolidated guide assists ServiceNow customers in upgrading Security Posture Control from the Yokohama release family to Zurich, highlighting new features, enhancements, important upgrade information, and activation details. It consolidates cross-family release notes to provide a comprehensive understanding of improvements and changes affecting security posture management during the upgrade. Show full answer Show less ## Important Upgrade Information * Review and complete pre- and post-upgrade tasks before moving to Zurich. * Refer to the **Install Security Posture Control** documentation for a complete list of required applications for both Yokohama and Zurich. * Starting with Zurich Patch 12, **Now Assist for Vulnerability Response** is being prepared for future deprecation; it will be hidden and not installed on new instances but will remain supported. * The product name has changed to **ServiceNow Otto for Unified Security Exposure Management**, reflecting this update. ## New Features Between Yokohama and Zurich, the following key features were introduced or enhanced: * **Custom API Service Graph Connectors:** Developers can create and publish API connectors within the Security Posture Control workspace using the Connector builder framework. Generative AI (Now Assist skill) automates steps such as selecting API templates, populating request/header parameters, and mapping response fields, streamlining integration with security tools and customized asset data import. Yokohama requires Patch 11 and Zurich requires Patch 4 of the ServiceNow Otto application for AI capabilities. * **Enhanced Policies and Asset Profiles:** New policies and asset profiles help identify configuration gaps and security tool coverage issues for tools such as CrowdStrike, Microsoft Intune, Defender, SCCM, HCL Big Fix, SentinelOne, Qualys, and Rapid7. These can be activated in the Security Posture Control workspace for improved posture insights. * **SentinelOne Integration:** Enables import of mitigation controls data, enhancing detection of active controls on assets and improving coverage monitoring. * **Netskope Integration:** Imports hardware and software asset inventory data into the ServiceNow CMDB, supporting comprehensive asset management. ## Changes * Security Posture Control now depends on service graph connector data populated in the CMDB 360 Data table, which requires enabling the `glide.identificationengine.multisourceenabled` system property and appropriate administrative roles. * Labels on mitigation control details for vulnerable item records have been enhanced for better clarity, such as expanding abbreviations like "EDR" to "Endpoint Protection." * The **Coral theme** is introduced as the default for new portals, web, and mobile experiences, offering a modern, brand-neutral interface with an optional dark theme to improve readability and reduce eye strain. ## Removals and Deprecations No features or functionalities of Security Posture Control were removed or deprecated between Yokohama and Zurich releases, except for the upcoming deprecation of Now Assist for Vulnerability Response noted above. ## Activation and Installation * Security Posture Control is available via the ServiceNow Store for both Yokohama and Zurich releases. * Install or upgrade by requesting the required applications from the ServiceNow Store. * Refer to the ServiceNow Store version history for cumulative release notes and installation guidance. ## Accessibility and User Experience * The new Coral theme includes a dark mode option for web and mobile, improving user experience by reducing eye strain and enhancing readability. ## Practical Implications for ServiceNow Customers * Upgrade preparation requires understanding dependencies on service graph connectors and CMDB data population settings. * Leverage generative AI capabilities in the Connector builder to accelerate custom API connector development, enabling better integration with diverse security tools tailored to your environment. * Utilize enhanced policies and asset profiles to actively monitor and improve your organization's security posture by identifying coverage gaps and configuration issues. * Adopt the new Coral theme and dark mode to enhance the usability and accessibility of Security Posture Control interfaces across devices. Consolidated page of all release notes for Security Posture Control from Yokohama to Zurich. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Security Posture Control release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Zurich. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Security Posture Control to Zurich Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-securityposturecontrol-summary__entry__2} | Release | Release notes | |-|-| | Yokohama | Upgrade information : For a complete list of the applications that are required to implement Security Posture Control, see [Install Security Posture Control](https://www.servicenow.com/docs/access?context=spc-install&family=yokohama&ft:locale=en-US). | | Zurich | Upgrade information : For a complete list of the applications that are required to implement Security Posture Control, see [Install Security Posture Control](https://www.servicenow.com/docs/access?context=spc-install&family=zurich&ft:locale=en-US). Starting with Zurich Patch 12, Now Assist for Vulnerability Response is being prepared for future deprecation. It will be hidden and no longer installed on new instances but will continue to be supported. For details, see the [Deprecation Process \[KB0867184\]](https://support.servicenow.com/kb_view.do?sysparm_article=KB0867184) article in the Now Support Knowledge Base. The change is reflected in the name of ServiceNow® products, including Now Assist for Vulnerability Response which is called ServiceNow Otto for Unified Security Exposure Management. See [ServiceNow Otto for Unified Security Exposure Management](https://www.servicenow.com/docs/access?context=now-assist-for-usem-landing-ties&family=zurich&ft:locale=en-US) for more information. | [ ] ## New features Between your current release family and Zurich, new features were introduced for Security Posture Control. {#dfrn3-securityposturecontrol-summary__entry__8} | Release | Release notes | |-|-| | Yokohama | [Create a custom API service graph connector in the Security Posture Control workspace](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=yokohama&ft:locale=en-US) : Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the Security Posture Control workspace. With a Now Assist skill that is included with the ServiceNow Otto for Unified Security Exposure Management application, your developers have the option to automate steps in the Connector builder framework. * You have the option to automate the steps for selecting API templates, populating request and header parameters, and response field mapping with generative AI. Note: You must install [Yokohama Patch 11](https://www.servicenow.com/docs/access?context=yokohama-patch-11&family=yokohama&ft:locale=en-US) of the ServiceNow Otto for Unified Security Exposure Management application to have access to the generative AI skill for the Connector builder framework. See the [ServiceNow Otto for Security Incident Response (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=yokohama&ft:locale=en-US) and [Supporting information](https://www.servicenow.com/docs/access?context=supporting-information-now-assist-vr&family=yokohama&ft:locale=en-US) for more information. * Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment. * Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build. [Enhancements to policies and asset profiles included with the Security Posture Control application](https://www.servicenow.com/docs/access?context=spc-policies-overview&family=yokohama&ft:locale=en-US) : Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage for the following tools: * CrowdStrike * Microsoft Intune, Defender, and SCCM * HCL Big Fix * SentinelOne * Qualys * Rapid7 [SentinelOne integration for mitigation controls monitoring](https://www.servicenow.com/docs/access?context=spc-controls-policies-for-edr&family=yokohama&ft:locale=en-US) : You can import SentinelOne mitigation controls data with this integration to help you detect which mitigation controls are on your assets. Use this integration with the asset and software data that you import with the SentinelOne Service Graph Connector to help you monitor your security tool coverage on your enterprise assets. [Netskope](https://www.servicenow.com/docs/access?context=sgc-netskope-integration&family=yokohama&ft:locale=en-US) : This product pulls in asset inventory data for hardware and software from the Netskope database into the ServiceNow Configuration Management Database (CMDB) application. | | Zurich | [Create a custom API service graph connector in the Security Posture Control workspace](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=zurich&ft:locale=en-US) : Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the Security Posture Control workspace. With a Now Assist skill that is included with the ServiceNow Otto for Unified Security Exposure Management application, your developers have the option to automate steps in the Connector builder framework. * You have the option to automate the steps for selecting API templates, populating request and header parameters, and response field mapping with generative AI. Note: You must install Zurich Patch 4 of the ServiceNow Otto for Unified Security Exposure Management application to have access to the generative AI skill for the Connector builder framework. See the [ServiceNow Otto for Security Incident Response (SIR) (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=zurich&ft:locale=en-US) and [Supporting information](https://www.servicenow.com/docs/access?context=supporting-information-now-assist-vr&family=zurich&ft:locale=en-US) for more information. * Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment. * Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build. [Enhancements to policies and asset profiles included with the Security Posture Control application](https://www.servicenow.com/docs/access?context=spc-policies-overview&family=zurich&ft:locale=en-US) : Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage for the following tools: * CrowdStrike * Microsoft Intune, Defender, and SCCM * HCL Big Fix * SentinelOne * Qualys * Rapid7 | [ ] ## Changes Between your current release family and Zurich, some changes were made to existing Security Posture Control features. {#dfrn3-securityposturecontrol-summary__entry__14} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | * Security Posture Control relies on data from service graph connectors that is populated in the CMDB 360 Data \[cmdb_multisource_data\] table. This data is populated only when the glide.identification_engine.multisource_enabled system property is set to true. You must have the cmdb_ms_admin role to modify property values. To set the property, navigate to AllConfigurationCMDB 360 Properties. * The labels on the form view for the mitigation control details record associated with vulnerable item records (VITs) have been enhanced for more clarity. These updates make the interface more user-friendly by expanding abbreviations on the form view, such as changing "EDR" to "Endpoint Protection." Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | [ ] ## Removed Between your current release family and Zurich, some Security Posture Control features or functionality were removed. {#dfrn3-securityposturecontrol-summary__entry__20} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Deprecations Between your current release family and Zurich, some Security Posture Control features or functionality were deprecated. {#dfrn3-securityposturecontrol-summary__entry__26} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Activation information Review information on how to activate Security Posture Control. {#dfrn3-securityposturecontrol-summary__entry__32} | Release | Release notes | |-|-| | Yokohama | Activation information : Install Security Posture Control by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: Security Posture Control is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | Activation information : Install Security Posture Control by requesting the required applications from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: Security Posture Control is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__38} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__44} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Security Posture Control, such as specific requirements or compliance levels. {#dfrn3-securityposturecontrol-summary__entry__50} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | Accessibility information : Dark theme : The new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability. | [ ] ## Localization information If there are specific localization considerations for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__56} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Security Posture Control we have noted them here. {#dfrn3-securityposturecontrol-summary__entry__62} | Release | Release notes | |-|-| | Yokohama | * Create and publish your own API connectors with a step-by-step process in the Connector builder module in the Security Posture Control workspace. You can use generative AI to automate some steps. See the [ServiceNow Otto for Security Incident Response (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=yokohama&ft:locale=en-US) for more information about the Now Assist skill. * Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. * Use the policies included with the application or custom policies that you create to monitor your assets for overall security tool coverage, compliance with internal configuration standards, critical combinations of security gaps and vulnerabilities, and possible internet exposure. See [Security Posture Control](https://www.servicenow.com/docs/access?context=spc-landing&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * Create and publish your own API connectors with a step-by-step process in the Connector builder module in the Security Posture Control workspace. You can use generative AI to automate some steps. See the [ServiceNow Otto for Security Incident Response (SIR) (SIR) release notes](https://www.servicenow.com/docs/access?context=secops-now-assist-security-operations-rn&family=zurich&ft:locale=en-US) for more information about the Now Assist skill. * Get insights into your overall security posture and configuration gaps in your security tools using new policies and asset profiles that are included with the Security Posture Control application. * Use the policies included with the application or custom policies that you create to monitor your assets for overall security tool coverage, compliance with internal configuration standards, critical combinations of security gaps and vulnerabilities, and possible internet exposure. See [Security Posture Control](https://www.servicenow.com/docs/access?context=spc-landing&family=zurich&ft:locale=en-US) for more information. | [ ] *[\>]: and then