Cloud Exposure View release notes
Summarize
Summary of Cloud Exposure View release notes
The ServiceNow® Cloud Exposure View, introduced in the Zurich release, allows cloud security teams to monitor and manage security findings from multiple vendors in a unified interface. This module is supported by Unified Security Exposure Management and enhances your ability to visualize and act on cloud-related security data.
Show less
Key Features
- Monitor cloud security findings from various vendors in one location.
- Configure interactive widgets for asset visualization and filtering by categories such as findings, assets, and exceptions.
- Access detailed lists for findings including "Needs Attention" resources and compliance scores.
- View imported aggregated security data from third-party vendors, which can also be accessed through the Unified Cloud workspace.
- Enhancements to Wiz Vulnerability Response Integration for better detection mapping and error resolution.
Key Outcomes
With the Cloud Exposure View, customers can expect improved visibility into cloud security risks, streamlined management of findings, and enhanced integration capabilities with existing tools. The module is designed to support proactive remediation actions, thereby helping organizations maintain a strong security posture in their cloud environments.
Activation Information
To activate the Cloud Exposure View, customers must install the required applications from the ServiceNow Store. Access to Unified Security Exposure Management is necessary, which is available to customers entitled to Vulnerability Response.
The ServiceNow® Cloud Exposure View is a module that is supported by Unified Security Exposure Management. The Cloud Exposure View module provides a single location for cloud security teams to monitor and act on all their cloud-related security findings from multiple vendors across their cloud environments. The Cloud Exposure View is new in the Zurich release.
Cloud Exposure View highlights for the Zurich release
- Monitor and act on all your cloud-related security findings from multiple vendors across your cloud environments.
- Configure widgets that display interactive visualizations and filter assets by category for findings, assets, and exceptions.
- View panels that link you to lists for more details about your findings.
- View aggregated security data imported from third-party vendors.
- Aggregated data from the Cloud Exposure View can be viewed in the Unified Cloud workspace that is supported by ITOM Cloud Accelerate. See ITOM Cloud Accelerate release notes for more information.
See Exploring Cloud Exposure View for more information.
New Cloud Exposure View features
- Enhancements to the Wiz Vulnerability Response Integration
-
- The Universally Unique Identifier (UUID) that identifies detections for the Wiz Host Vulnerability integration will be mapped to a detection key. Note:This enhancement is supported for new customers only.
For existing customers, the detection key for the Wiz Host Vulnerability integration is created using the combination of vulnerability, asset_id, and proof.
- Added the source_id column to the Container Image Finding table (sn_vul_container_image_findings) and mapped the id attribute from the Wiz import to this field on findings records.Note:Perform a full import after upgrading to view the enhancement on container image findings, container image, and container image vulnerabilities records.
- The image repository name format for new and existing discovered container images has been updated to align with the discovery format. The supported format is registry/repository. A separate finding is created for a repository present in each registry.
- Appended all repositories that are associated with an image to the Repository field on the Discovered Container Image [sn_vul_container_image] table, which can help you see images from specific repositories.
- You can configure the First parameter for the Wiz Asset Integration to help you resolve 504 errors. You can reduce the page size if you are having memory issues or generating errors. The default value is 500.
- The default integration instance parameter for configuring finding keys for the Container Vulnerability Integration includes src_ci, vulnerability, package, image_layer, and image_repository.
- The Universally Unique Identifier (UUID) that identifies detections for the Wiz Host Vulnerability integration will be mapped to a detection key.
- The Cloud Exposure View module provides a single location for cloud security teams to monitor and act on all their cloud-related security findings from multiple vendors across their cloud environments.
- Configure widgets that display interactive visualizations and filter assets by category for findings, assets, and exceptions.
- View panels with links on a single page that direct you to the following detailed lists:
- Needs Attention
- Cloud resources with active findings
- Top Accounts/Assets by Risk
- Toxic combinations
- Compliance scores
- View aggregated security data imported from third-party vendors.
See Unified Security Exposure Management release notes for more information about Unified Security Exposure Management.
Important upgrade information for Cloud Exposure View
The Cloud Exposure View is a workspace in the Cloud Security for Cloud Workspace application that is supported by the Unified Security Exposure Management application. Unified Security Exposure Management (USEM) and the Cloud Security for Cloud Workspace applications are required. USEM is available to all customers who are entitled to Vulnerability Response. See Unified Security Exposure Management release notes for more information.
Activation information
Install the required applications by requesting them from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.