Skip to content
Requesting and approving an exception in Application Vulnerability Response › Exception Management in Application Vulnerability Response › Configure Application Vulnerability Response › Configure › Application Vulnerability Response › Unified Security Exposure Management › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Define policy reason mapping

You can define the reason choices to be available to any user who requests an exception.

Before you begin

You must have the GRC: Policy and Compliance Management application installed. This application is available from the ServiceNow® Store with a separate subscription.

For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

Role required: sn_vul.compliance.manager and sn_vul.vulnerability_admin

Procedure

  1. Navigate to All > Policy and Compliance > Policy Exceptions > Integration Registry.

    Note: You can either select a reason from the reason choices available in the Reason Choices table or add a new reason.

  2. Click the integration registry for your application, for example, Application Vulnerability Response, Vulnerability Response, and so on.

  3. To add an existing reason choice, perform the following steps:

    1. In the Reason Choices list, click New.

    2. Click the magnifying glass icon to select a reason.

  4. To add new reason choices to the Reason Choices table, perform the following steps:

    1. In the Reason Choices list, click New.

    2. Click the magnifying glass icon.

    3. Click New.

    4. On the form, fill in the fields.

FieldDescription
LabelUnique label for this choice.
ValueUnique value for this choice. This value is mapped in the Policy Exception Reason Mappings table for the respective applications. To navigate to this table, enter sn\_vul\_policy\_reason\_mapping.LIST in the filter navigator.
OrderOrder for this choice. Reasons are ordered based on this number.
DefaultOption to indicate that this reason choice will be available whenever an on demand policy exception is requested. If the integration registry doesn’t contain any application-specific choices, then all reason choices that have the Default field selected will be available.
ActiveOption to display the choice in the list of reason choices.
  1. Click Submit.

Parent Topic:Requesting and approving an exception in Application Vulnerability Response