Cart 0

ServiceNow Vulnerability Response Implementation Training
Course 2544
2 DAY COURSE

Course Outline

This course covers Vulnerability Response essentials such as what Vulnerability Response is, why customers need Vulnerability Response, and how to properly implement Vulnerability Response.  

Participants will learn the common technical aspects of a Vulnerability Response implementation as well as experience various processes to effectively manage a Vulnerability Response implementation. Additionally, participants will learn tactical skills and strategies which will better prepare them to implement Vulnerability Response in a scalable, repeatable, and efficient manner. 

ServiceNow Vulnerability Response Implementation Training Benefits

  • In this course, you will:

    • Explore Vulnerability Response and discover the application components.
    • Configure NVD Integration.
    • Software Bill of Materials (SBOM).
    • Configure Classification Rules.
    • Configure Assignment Rules.
    • Configure Vulnerability Calculators.
    • Configure Vulnerability Remediation Task Rules.
    • Configure Vulnerability Workspaces.
    • Perform a Full Qualys Integration.
    • Understand the Exception Management Components.

  • Prerequisites:

    • Welcome to ServiceNow (On Demand)
    • ServiceNow Administration Fundamentals (SNAF) Training
    • ServiceNow Administration Advanced Training
    • Get Started with Now Create (On Demand)
    • ServiceNow Platform Implementation Training
    • ServiceNow Security Operations (SecOps) Fundamentals Training 

  • Certification Information

    At the end of the course, students will receive access to a voucher for the Certified Implementation Specialist - Vulnerability Response (CIS-VR) exam. 

ServiceNow Vulnerability Training Outline

Learning Objectives

Day 1

Module 1: Vulnerability Response Overview 

Objectives 

  • Introducing Vulnerability Response
  • Vulnerability Response – the components
  • Vulnerability Response Personas  

Labs 

  • Lab 1.2.1: Exploring Vulnerability Response
  • Lab 1.2.2: Vulnerability Response Components
  • Lab 1.3.1 Vulnerability Response Persona 

Module 2: Data Organization in Vulnerability Response 

Objectives 

  • Vulnerability Response Foundational Data
  • Host Vulnerability Response
  • Application Vulnerability Response
  • Container Vulnerability Response
  • Vulnerability Response Dashboard  

Labs 

  • Lab 2.1 Configure NVD Integration
  • Lab 2.3 Software Bill of Materials (SBOM) (Optional) 

Module 3: Tools to manage Vulnerability Response 

Objectives 

  • CMDB, CSDM, Classification Rules
  • Automated Triage – Assignment Rules
  • Vulnerability Grouping Strategies  

Labs

  • Lab 3.1.1 Vulnerability Classification Rules
  • Lab 3.2.1 Vulnerable Item Assignment Rules
  • Lab 3.2.2 Configure Vulnerability Calculators
  • Lab 3.3.1 Vulnerability Remediation Task Rules
  • Lab 3.3.2 Vulnerability Workspaces 

Day 2 

Module 4: Vulnerability Integration and Solution Management  

Objectives 

  • Vulnerability Integrations
  • Vulnerability Solution Management and Enrichment
  • Vulnerability Exposure Assessment  

Labs 

Lab 4.1 Qualys Integration and Store Preview 

Module 5: Vulnerability Remediation and Other Actions 

Objectives 

  • Handling Vulnerability Exceptions
  • Vulnerability Response and Change Management
  • Vulnerability Close Out
  • Application Penetration Testing
  • Security Posture Control  

Labs 

Lab 5.1 Exception Management in Vulnerability Response 

Course Dates
Attendance Method
Note about the Certification Exam

When you register for the course, you will be prompted to choose Y/N to take the exam. Please select yes, as all HHS CISO employees are required to attempt the exam if one is offered for the course. Please be advised, if your course if funded by DIR, the Certification Organization has agreed to provide DIR the pass/fail status of your exam. DIR will only share this information in an aggregated report to state leadership that reflects total exam pass or fails. No individual names of any students will be included in any reports.

DIR requires that you submit the request for your exam voucher within one month of the last day of your course. DIR requires that you take your exam within six months of the last day of your course.

Additional comments or questions (optional)