Solutions

  • Products
  • Use Cases
  • Industries

Platform

  • REPORT
  • Gartner: ServiceNow a Leader
  • 2018 Enterprise High-Productivity Application Platform as a Service Magic Quadrant

Customers

  • SUCCESS CENTER
  • Your Strategic Resource
  • Discover best practices for every phase of your ServiceNow journey

Explore

  • WHY SERVICENOW
  • Thanks to you.
  • You're why we're #1 on the Forbes World's Most Innovative Companies list.

Plan your successful CMDB deployment

INTRO

Achieve high‑performing business services using a healthy CMDB

Security incident response overview

Is your organization ready for security incident response? Have you already started but need some guidance from an expert? This overview shows you what to consider as you analyze your organization’s security incident tool and process.

This list will help get you started. Some elements of the list include links so you can dig deeper. Keep coming back to see more links as we add them.

Security operations – Security incident Technical Success Readiness (TSR) overview

Review your core configuration, for example:

Review your upstream alert system integrations, for example:

  • Security information and event management (SIEM) ‑ Splunk, Qradar, LogRhythm, ArcSight
  • Firewall intrustion detection and prevention
  • Identity and access

Review your core processes and worflows, for example:

  • Phishing
  • Malicious code
  • Unauthorized access

Review your automated enrichment processes, for example:

  • VirusTotal
  • Palo Alto Networks ‑ AutoFocus and WildFire
  • MID Server ‑ SCCM, WMI, Python

Review your automated action processes, for example:

  • Firewall block
  • Account deactivation
  • Endpoint quarantine

Review your SLAs, for example:

  • P1, P2, and P3
  • Sensitive data
  • Critical systems

Review your metrics, for example:

Review your reporting and dashboard configurations, for example:

  • CSO/CIO
  • Director or manager
  • Analyst

More links to content coming soon!

Thank You

Thank you for submitting your request. A ServiceNow representative will be in contact within 48 hours.

form close button

Contact Us

I agree to receive emails from ServiceNow about product, services, and events. I can unsubscribe from any email if I wish.