{"id":516057,"date":"2023-10-10T10:17:17","date_gmt":"2023-10-10T08:17:17","guid":{"rendered":"https:\/\/www.devoteam.com\/expert-view\/whats-new-for-secops-in-the-servicenow-vancouver-release\/"},"modified":"2023-10-10T10:17:17","modified_gmt":"2023-10-10T08:17:17","slug":"whats-new-for-secops-in-the-servicenow-vancouver-release","status":"publish","type":"expert-view","link":"https:\/\/devoteam.info\/be\/expert-view\/whats-new-for-secops-in-the-servicenow-vancouver-release\/","title":{"rendered":"What’s new for SecOps in the ServiceNow Vancouver release"},"content":{"rendered":"\n

In today’s digitised era, the prominence of cybersecurity is unarguable. As the business landscape transforms, so does the complexity of the threats it faces. ServiceNow’s Vancouver release introduces a slew of sophisticated features <\/span><\/span>to tackle these challenges strategically.<\/p>\n\n\n\n

<\/div>\n\n\n\n

Vulnerability Response<\/strong><\/h1>\n\n\n\n

Software Bill of Materials (SBOM)<\/h2>\n\n\n\n

The Software Bill of Materials (SBOM) is a detailed catalogue of all software components and serves as an integral tool akin to an ingredient list. With the increasing reliance on third-party and open-source software, understanding your software’s makeup has become more crucial than ever. <\/p>\n\n\n\n

Incidents like the SolarWinds breach and the Log4j vulnerability underscore the importance of this comprehension. The ServiceNow Vancouver release champions this feature by aligning with industry standards like CycloneDX and SPDX. <\/p>\n\n\n\n

Acknowledged by the National Telecommunications and Information Administration (NTIA) and underscored by the U.S. Executive Order in 2021, the SBOM concept has gained traction, particularly for federal bodies and their associates. Additionally, with the European Union’s introduction of the Cyber Resilience Act in 2022, the emphasis on having a detailed software inventory has become even more pronounced on a global scale. <\/p>\n\n\n\n

By offering a clear component list, businesses can bolster transparency and trust<\/strong>. Furthermore, the ServiceNow Software Bill of Materials enables rapid identification of known vulnerabilities, enhancing response times<\/strong>. Such transparency not only ensures security but also compliance with evolving global regulations.<\/p>\n\n\n\n

For software teams, the Software Bill of Materials is invaluable, aiding in seamless integration and ensuring compatibility during software updates.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"
SBOM Workspace, Source: ServiceNow<\/em><\/figcaption><\/figure>\n\n\n\n
<\/div>\n\n\n\n

Atlassian Jira Integration<\/h2>\n\n\n\n

The ServiceNow Vancouver release introduces refined integration with Atlassian Jira. Through daily scheduled jobs, it ensures bi-directional synchronisation between Jira and Vulnerability Response for real-time updates.<\/strong> This synergy not only bolsters comprehensive visibility for remediation users and vulnerability managers but also strengthens enterprise-wide cybersecurity resilience.<\/p>\n\n\n\n

Unified Attack Surface Dashboard<\/h2>\n\n\n\n

The Unified Vulnerability Response Dashboard emerges as a crucial tool for modern cybersecurity. It provides a comprehensive view of an organisation’s threat landscape, consolidating vulnerability data from infrastructure, cloud, applications, and more. It offers deeper insights into assets, highlighting external-facing entities and unscanned items. <\/p>\n\n\n\n

Centralised data access is invaluable for security leaders and CISOs, emphasising the importance of integrated data visibility<\/strong>. Role-based access ensures that the right personnel receive appropriate insights. Moreover, automated data collection guarantees real-time updates, allowing organisations to address vulnerabilities swiftly<\/strong> in the face of rapid cyber threats.<\/p>\n\n\n\n

\"\"
Unified Attack Surface Dashboard, Source: ServiceNow<\/em><\/figcaption><\/figure>\n\n\n\n

Zero-Day Vulnerability Insight<\/h2>\n\n\n\n

While speaking about the ServiceNow Vancouver release, we need to mention a new tool for evaluating assets’ vulnerability to emerging threats – Exposure Assessment. This advanced feature provides businesses with a granular view into impacted software assets<\/strong> with vulnerabilities listed in the CISA or NVD catalogues or by adding zero-day vulnerabilities to identify impacted assets. <\/p>\n\n\n\n

By seamlessly navigating Exposure Assessment, analysts and managers can delve deep into affected systems and applications to understand the gravity of threats and formulate strategic responses.<\/p>\n\n\n\n

\"\"
View of impacted software assets in the Exposure Assessment, Source: ServiceNow<\/em><\/figcaption><\/figure>\n\n\n\n
<\/div>\n\n\n\n

Security Incident Response<\/strong><\/h1>\n\n\n\n
<\/div>\n\n\n\n

The new ServiceNow  release <\/a>comes with some useful new features for Security Incident Response (SIR)<\/p>\n\n\n\n

Viewing SIR Workspace Dashboards<\/h2>\n\n\n\n

In the Classic UI, there are a few standard dashboards available under the Homepage and Performance Analytics Dashboards that are available when the Performance Analytics for Security Incident Response plugin is installed. Thanks to the Vancouver release, it will be available in the new workspace under the SIR Dashboards section. CISO and Security Incident Manager overview dashboards migrated to an enhanced user interface.<\/p>\n\n\n\n

The new interface delivers improved usability and ease of customisation. Now, you can:<\/p>\n\n\n\n