ServiceNow Vulnerability Response Implementation Training

Course Outline

This course covers Vulnerability Response essentials such as what Vulnerability Response is, why customers need Vulnerability Response, and how to properly implement Vulnerability Response.  

Participants will learn the common technical aspects of a Vulnerability Response implementation as well as experience various processes to effectively manage a Vulnerability Response implementation. Additionally, participants will learn tactical skills and strategies which will better prepare them to implement Vulnerability Response in a scalable, repeatable, and efficient manner. 

ServiceNow Vulnerability Response Implementation Training Benefits

  • In this course, you will:

    • Explore Vulnerability Response and discover the application components.
    • Configure NVD Integration.
    • Software Bill of Materials (SBOM).
    • Configure Classification Rules.
    • Configure Assignment Rules.
    • Configure Vulnerability Calculators.
    • Configure Vulnerability Remediation Task Rules.
    • Configure Vulnerability Workspaces.
    • Perform a Full Qualys Integration.
    • Understand the Exception Management Components.
  • Prerequisites:

    • Welcome to ServiceNow (On Demand)
    • ServiceNow Administration Fundamentals (SNAF) Training
    • {course:2539}
    • Get Started with Now Create (On Demand)
    • ServiceNow Platform Implementation Training
    • ServiceNow Security Operations (SecOps) Fundamentals Training 
  • Certification Information

    At the end of the course, students will receive access to a voucher for the Certified Implementation Specialist - Vulnerability Response (CIS-VR) exam. 

ServiceNow Vulnerability Training Outline

Learning Objectives

Day 1

Module 1: Vulnerability Response Overview 

Objectives 

  • Introducing Vulnerability Response
  • Vulnerability Response – the components
  • Vulnerability Response Personas  

Labs 

  • Lab 1.2.1: Exploring Vulnerability Response
  • Lab 1.2.2: Vulnerability Response Components
  • Lab 1.3.1 Vulnerability Response Persona 

Module 2: Data Organization in Vulnerability Response 

Objectives 

  • Vulnerability Response Foundational Data
  • Host Vulnerability Response
  • Application Vulnerability Response
  • Container Vulnerability Response
  • Vulnerability Response Dashboard  

Labs 

  • Lab 2.1 Configure NVD Integration
  • Lab 2.3 Software Bill of Materials (SBOM) (Optional) 

Module 3: Tools to manage Vulnerability Response 

Objectives 

  • CMDB, CSDM, Classification Rules
  • Automated Triage – Assignment Rules
  • Vulnerability Grouping Strategies  

Labs

  • Lab 3.1.1 Vulnerability Classification Rules
  • Lab 3.2.1 Vulnerable Item Assignment Rules
  • Lab 3.2.2 Configure Vulnerability Calculators
  • Lab 3.3.1 Vulnerability Remediation Task Rules
  • Lab 3.3.2 Vulnerability Workspaces 

Day 2 

Module 4: Vulnerability Integration and Solution Management  

Objectives 

  • Vulnerability Integrations
  • Vulnerability Solution Management and Enrichment
  • Vulnerability Exposure Assessment  

Labs 

Lab 4.1 Qualys Integration and Store Preview 

Module 5: Vulnerability Remediation and Other Actions 

Objectives 

  • Handling Vulnerability Exceptions
  • Vulnerability Response and Change Management
  • Vulnerability Close Out
  • Application Penetration Testing
  • Security Posture Control  

Labs 

Lab 5.1 Exception Management in Vulnerability Response 

Course Dates - North America
Course Dates - Europe
Attendance Method
Additional Details (optional)