Vulnerability Response Integration with Microsoft Defender for IoT (Azure)

The Vulnerability Response Integration with Microsoft Defender for IoT (Azure) uses data imported from Microsoft Defender for IoT (Azure) to enable risk-based action with the production process context.

Use the Vulnerability Response integration with the ServiceNow® Operational Technology Vulnerability Response application to track, prioritize, and resolve vulnerabilities on devices used in the production process.

Key Features

• Import CVEs associated with OT devices from Microsoft Defender for IoT (Azure) and create vulnerable items (VITs) to provide a single view of OT devices vulnerability data with production process context.
• Run imports of vulnerabilities automatically on your own schedule.

• Using assignment rules, VITs can be automatically routed for remediation to local site-based teams to take risk-based action.

• Install the Vulnerability Response for Microsoft Defender for IoT (Azure)
  You can install the Vulnerability Response for Microsoft Defender for IoT (Azure) if you have the admin role. The application includes installs related ServiceNow® Store applications and plugins if they are not already installed.

• Navigate to Guided Setup for the Vulnerability Response Integration with Microsoft Defender for IoT (Azure)
  After installing the Vulnerability Response Integration with Microsoft Defender for IoT (Azure), navigate to the Guided Setup to walk you through the application's configuration.
• Support for the Vulnerability Response Integration with Microsoft Defender for IoT (Azure)
  You can refer to this section for questions regarding data mapping and error handling.

Parent Topic:Operational Technology Vulnerability Response Integrations