{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":8030,"path":"delta-xanadu-australia/australia-xanadu-configurationcompliance-release-notes.md","title":"Combined Configuration Compliance release notes for upgrades from Xanadu to Australia","bundle":null,"doc_type":null,"release":"australia","body":"\n# Combined Configuration Compliance release notes for upgrades from Xanadu to Australia\n\nConsolidated page of all release notes for Configuration Compliance from Xanadu to Australia.\n\n## How to use this page\n\nTo help you prepare for your upgrade, we have combined the cross-family Configuration Compliance release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia.\n\n**Tip:** If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says \"No updates for this release.\"\n\n## Important information for upgrading Configuration Compliance to Australia\n\nBefore you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   **Upgrade information**\n\nIf you are currently using Configuration Compliance, and you do not intend to upgrade to Unified Security Exposure Management \\(USEM\\), install a version below v30.x of Configuration Compliance and for upgrades to supported third-party integration applications.\n\nThe Missing Assets \\[sn\\_vul\\_wiz\\_missing\\_asset\\] table used for storing assets imported by the backfill integrations for the [Vulnerability Response Integration with Wiz](https://www.servicenow.com/docs/access?context=vr-wiz-exploring-host-cf&family=zurich&ft:locale=en-US) is deprecated. If you are currently using the Vulnerability Response with Wiz integrations, after updating to version 1.1, you must backdate any of your existing Wiz primary integrations by three days and run them. Please review more information about the Wiz integration at [SecOps articles on the Security Operations Community](https://www.servicenow.com/community/secops-articles/announcement-wiz-integration-with-servicenow-secops/ta-p/3325055).\n\nFor more information about the released versions of the Vulnerability Response application as well as the third-party and ServiceNow applications that are compatible with the Zurich release, see the [Vulnerability Response Compatibility Matrix and Release Schema Changes \\[KB0856498\\]](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0856498) article in the Now Support Knowledge Base.\n\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   **Upgrade information**\n\nIf you're currently using Configuration Compliance, and you don't intend to upgrade to Unified Security Exposure Management \\(USEM\\), install a version previous v30.x of Configuration Compliance and for upgrades to supported third-party integration applications.\n\nStarting with Australia Patch 5, Now Assist for Vulnerability Response is being prepared for future deprecation. It will be hidden and no longer installed on new instances but will continue to be supported. For details, see the [Deprecation Process \\[KB0867184\\]](https://support.servicenow.com/kb_view.do?sysparm_article=KB0867184) article in the Now Support Knowledge Base.\n\nServiceNow Otto® is the new AI experience brand. This change is reflected in the name of ServiceNow products, including the Now Assist for Vulnerability Response product name, which will be replaced with ServiceNow Otto for Unified Security Exposure Management. Your product entitlements remain unchanged. Check your entitlements to determine your access to specific features.\n\nThe Missing Assets \\[sn\\_vul\\_wiz\\_missing\\_asset\\] table used for storing assets imported by the backfill integrations for the [Vulnerability Response Integration with Wiz](https://www.servicenow.com/docs/access?context=vr-wiz-exploring-host-cf&family=australia&ft:locale=en-US) is deprecated. If you're currently using the Vulnerability Response with Wiz integrations, after updating to version 1.1, backdate any of your existing Wiz primary integrations by three days and run them. See more information about the Wiz integration at [SecOps articles on the Security Operations Community](https://www.servicenow.com/community/secops-articles/announcement-wiz-integration-with-servicenow-secops/ta-p/3325055).\n\nFor more information about the released versions of the Vulnerability Response application and the third party and ServiceNow applications that are compatible with the Australia release, see the [Vulnerability Response Compatibility Matrix and Release Schema Changes \\[KB0856498\\]](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0856498) article in the Now Support Knowledge Base.\n\n\n</td></tr></tbody>\n</table>## New features\n\nBetween your current release family and Australia, new features were introduced for Configuration Compliance.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\n-   **[Identify Wiz Resource Types for import](https://www.servicenow.com/docs/access?context=wiz-assets-resources-tab&family=xanadu&ft:locale=en-US)**\n\nIdentify the Resource Types \\(assets\\) reported by Wiz in your environment on the Wiz Integration Resource Type configuration page in your ServiceNow AI Platform instance that you want to import.\n\nThe Resource Types that you select apply to all the primary Wiz vulnerability and compliance integrations except the Wiz Container Vulnerability Integration.\n\n-   **[Wiz Backfill Integrations](https://www.servicenow.com/docs/access?context=wiz-backfill&family=xanadu&ft:locale=en-US)**\n\nRetrieve and process data stored on the Wiz Missing Assets \\[sn\\_vul\\_wiz\\_missing\\_asset\\] table for missing assets that were not processed by the primary compliance integrations with specialized Wiz Backfill Integrations.\n\n    -   Test Results Backfill Integration\n    -   Host Test Results Backfill Integration\n    -   Issues Backfill Integration\nThe Wiz Backfill Integrations are activated by default.\n\n-   **[Wiz Host Test Result Vulnerability Integration](https://www.servicenow.com/docs/access?context=wiz-host-test-result-tab-filters&family=xanadu&ft:locale=en-US)**\n\nImport test results associated with the resource type, `VIRTUAL MACHINE` with the Wiz Host Test Result Vulnerability Integration. This integration is activated by default.\n\n-   **[New Properties module](https://www.servicenow.com/docs/access?context=installed-with-config-compliance&family=xanadu&ft:locale=en-US)**\n\nStarting with v15.1 of Configuration Compliance, a new **Properties** module has been added to the navigation menu under the **Administration** section. This module enables direct modification of the values, offering a user-friendly method to manage and update system properties directly from the interface.\n\n-   **[Customize the calculation of Age and Age closed durations of a test result](https://www.servicenow.com/docs/access?context=view-vuln-config-compl-test-results&family=xanadu&ft:locale=en-US)**\n\nStarting with v15.1 of Configuration Compliance, the Age and Age Closed durations of a test result can be configured to be calculated from the date in the Created, Opened, or First Found fields.\n\n-   **[Associating a Qualys Test with its Test Group](https://www.servicenow.com/docs/access?context=Qualys-cc-Integration&family=xanadu&ft:locale=en-US)**\n\nYou can associate a Qualys Test with its Test Group by enabling the **sn\\_vulc.add\\_policy\\_as\\_key** system property. This helps you to identify the Test Group to which a Test Result belongs to and differentiate Test records with the same Test id that are associated with different Test Groups.\n\n-   **[Calculate the remediation target date of a remediation task with respect to the Last Opened date](https://www.servicenow.com/docs/access?context=cc-remed-target-rules&family=xanadu&ft:locale=en-US)**\n\nStarting with v15.1 of Configuration Compliance, you can customize the calculation of the remediation target date of a remediation task to be calculated with respect to the Last Opened date.\n\n-   **Open the search results in the [Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-change-app-scope-search&family=xanadu&ft:locale=en-US) or [IT Remediation Workspace](https://www.servicenow.com/docs/access?context=itr-ws-change-app-scope-search&family=xanadu&ft:locale=en-US) rather than the Classic UI**\n\nStarting with v24.0.6 of Vulnerability Response, automatically open your search results in the Vulnerability Manager Workspace or IT Remediation Workspace rather than the Classic UI, by adjusting the application scope in the unified navigation bar to Vulnerability Manager Workspace or IT Remediation Workspace respectively. These application scopes are available to you based on your assigned role.\n\n-   **[Vulnerability Manager Workspace access to the sn\\_vulc.read role](https://www.servicenow.com/docs/access?context=installed-with-config-compliance&family=xanadu&ft:locale=en-US)**\n\nStarting with v24.0.6 of Vulnerability Response, as a user with the sn\\_vulc.read role, you can view the test results in the Vulnerability Manager Workspace.\n\n-   **Navigate to the List page in the [Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-list-page&family=xanadu&ft:locale=en-US) or [IT Remediation Workspace](https://www.servicenow.com/docs/access?context=itr-ws-list-page&family=xanadu&ft:locale=en-US) by selecting the links from the All menu**\n\nStarting with v24.0.6 of Vulnerability Response, when you enable the 'sn\\_vul\\_cmn\\_ws.navigate\\_to\\_workspace' system property, selecting predefined filter links in the Configuration Compliance module from the 'All' menu will automatically open these links in the List page in the Vulnerability Manager Workspace or IT Remediation Workspace based on your role.\n\n-   **Hide the record count on the lists in the [Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-list-page&family=xanadu&ft:locale=en-US) and [IT Remediation Workspace](https://www.servicenow.com/docs/access?context=itr-ws-list-page&family=xanadu&ft:locale=en-US)**\n\nStarting with v24.0.6 of Vulnerability Response, you can hide the record count on the lists in the List page of the Vulnerability Manager Workspace and IT Remediation Workspace by adding the table names to the **glide.ui.list.seismic.omit.count** system property.\n\n-   **[Enable automatic refresh for the Home page dashboard in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-home-page-create-filter&family=xanadu&ft:locale=en-US)**\n\nStarting with v24.0.6 of Vulnerability Response, when creating and editing filters on the Configuration Test Results tab on the Home page of the Vulnerability Manager Workspace, you can configure the widgets to refresh automatically. Otherwise, you can manually refresh the widgets by selecting the **Refresh** button on the Configuration Test Results tab.\n\n-   **[Re-evaluating remediation properties for all records in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-reevaluate-remediation-parameters&family=xanadu&ft:locale=en-US)**\n\nStarting with v24.0.6 of Vulnerability Response, you can evaluate the remediation properties for all the test results from the Configuration Test Results list by selecting the **All items** in the **Record selection** field of the Re-evaluate remediation properties modal in the Vulnerability Manager Workspace.\n\n-   **[Re-evaluate remediation properties for test results in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-reevaluate-remediation-parameters&family=xanadu&ft:locale=en-US)**\n\nSelect the test results conditionally for reevaluating the following remediation properties in Vulnerability Manager Workspace:\n\n    -   Assignments\n    -   Remediation tasks\n    -   Remediation target date\n    -   Exceptions \\(Vulnerability Response v24.0.6\\)\n    -   Risk score\n-   **[Using bulk edit for test results in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-overview&family=xanadu&ft:locale=en-US)**\n\nPerform the following tasks on multiple test results simultaneously or a remediation task in Vulnerability Manager Workspace:\n\n    -   [Assign test results to an assignment group for remediation](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-assign&family=xanadu&ft:locale=en-US).\n    -   [Request an exception in bulk](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-request-exception&family=xanadu&ft:locale=en-US).\n    -   [Mark test results as false positive in bulk](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-request-false-positive&family=xanadu&ft:locale=en-US).\n-   **[Populating additional information for the test results](https://www.servicenow.com/docs/access?context=view-vuln-config-compl-test-results&family=xanadu&ft:locale=en-US)**\n\nThe Age, Age closed, Closed date, Active, and Last open date columns have been added in the test results table.\n\nThe test results that aren’t in the Closed state are marked as true in the **Active** field. The **Active** field replaces the **Result** and **State** fields in the filter conditions of the default-saved filters across the All menu, Configuration Compliance Overview, Unified, Cybersecurity Executive, and Health dashboards.\n\n-   **[CI compliance and test results compliance on a Test Group in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-list-page&family=xanadu&ft:locale=en-US)**\n\nView the percentage of CI compliance and test results compliance on a Test Group in Vulnerability Manager Workspace.\n\n-   **[Enabling or disabling the test results import for a Qualys test group in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=enable-disable-imports-qualys&family=xanadu&ft:locale=en-US)**\n\nEnable or disable the import of test results for a Qualys test group in Vulnerability Manager Workspace.\n\n-   **[Updating Rollup weights section in the roll up calculators](https://www.servicenow.com/docs/access?context=v11create-rollup-calc&family=xanadu&ft:locale=en-US)**\n\nOther than the script format, an alternative approach of adding the weights in the Rollup Weights section for the rollup calculators has been introduced.\n\n-   **[Percentage test result compliance in the Discovered Items table](https://www.servicenow.com/docs/access?context=discovered-items-fields&family=xanadu&ft:locale=en-US)**\n\nThe percentage of test results compliance of a CI is populated in the % Test Results Compliance column of the Discovered Item. To populate this value in the % Test Results Compliance column, set `calcTRComplianceForCI` to `true` in the **Update remediation metrics** scheduled job.\n\n-   **[Quick Start Tests for Configuration Compliance](https://www.servicenow.com/docs/access?context=available-quick-start-tests&family=xanadu&ft:locale=en-US)**\n\nAfter upgrades and deployments of new applications or integrations, run quick start tests to verify that Configuration Compliance works as expected. If you customized Configuration Compliance, copy the quick start tests and configure them for your customizations.\n\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\n-   **[Identify Wiz Resource Types for import](https://www.servicenow.com/docs/access?context=wiz-assets-resources-tab&family=yokohama&ft:locale=en-US)**\n\nIdentify the Resource Types \\(assets\\) reported by Wiz in your environment on the Wiz Integration Resource Type configuration page in your ServiceNow AI Platform instance that you want to import.\n\nThe Resource Types that you select apply to all the primary Wiz vulnerability and compliance integrations except the Wiz Container Vulnerability Integration.\n\n-   **[Wiz Backfill Integrations](https://www.servicenow.com/docs/access?context=wiz-backfill&family=yokohama&ft:locale=en-US)**\n\nRetrieve and process data stored on the Wiz Missing Assets \\[sn\\_vul\\_wiz\\_missing\\_asset\\] table for missing assets that were not processed by the primary compliance integrations with specialized Wiz Backfill Integrations.\n\n    -   Test Results Backfill Integration\n    -   Host Test Results Backfill Integration\n    -   Issues Backfill Integration\nThe Wiz Backfill Integrations are activated by default.\n\n-   **[Wiz Host Test Result Vulnerability Integration](https://www.servicenow.com/docs/access?context=wiz-host-test-result-tab-filters&family=yokohama&ft:locale=en-US)**\n\nImport test results associated with the resource type, `VIRTUAL MACHINE` with the Wiz Host Test Result Vulnerability Integration. This integration is activated by default.\n\n\n -   **[Create remediation tasks manually in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-create-remediation-task&family=yokohama&ft:locale=en-US)**\n\nWith the sn\\_vulc.admin role, you can create remediation tasks manually by selecting some or all the records in the Configuration Test Results lists in the Vulnerability Manager Workspace. These records are grouped into one or more remediation tasks according to the grouping criteria selected while creating remediation tasks.\n\n-   **[Create remediation tasks manually in the IT Remediation Workspace](https://www.servicenow.com/docs/access?context=itr-ws-create-remediation-task&family=yokohama&ft:locale=en-US)**\n\nWith the sn\\_vulc.remediation\\_owner role, you can create remediation tasks manually by selecting desired records in the Configuration Test Results lists in the IT Remediation Workspace. These records are grouped into one or more remediation tasks according to the grouping criteria selected while creating remediation tasks.\n\n-   **[View risk score details of a test result in the Work notes section](https://www.servicenow.com/docs/access?context=config-compliance-calculator-rules&family=yokohama&ft:locale=en-US)**\n\nStarting with v15.2.1 of Configuration Compliance, the system property **sn\\_sec\\_cmn.risk\\_score\\_changes\\_add\\_worknotes** is inactive by default. If you enable it, only then you can see all the changes related to the risk score of a test result in the Work notes section. Additionally, the work notes are updated only if there’s a change in the risk score.\n\n-   **[Quick Start Tests for Configuration Compliance](https://www.servicenow.com/docs/access?context=available-quick-start-tests&family=yokohama&ft:locale=en-US)**\n\nAfter upgrades and deployments of new applications or integrations, run quick start tests to verify that Configuration Compliance works as expected. If you customized Configuration Compliance, copy the quick start tests and configure them for your customizations.\n\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   **[Remediation task rule execution mode](https://www.servicenow.com/docs/access?context=sem-grouping-multiple-findings-remediation-tasks-processing&family=zurich&ft:locale=en-US)**\n\nYou can now choose how remediation task rules are evaluated during ingestion. The new Match First execution mode evaluates rules sequentially and applies only the first matching rule, assigning each finding to exactly one remediation task. The default Match All mode continues to evaluate all applicable rules.\n\n-   **[Optimized Tenable.io Compliance Results ingestion](https://www.servicenow.com/docs/access?context=tenable-io-integrations-list&family=zurich&ft:locale=en-US)**\n\nStarting with v 6.1.3, the Tenable.io Compliance Results Integration is replaced by the Tenable.io Fixed Compliance Results Integration and Tenable.io Open Compliance Results Integration. Compliance results are now imported based on their status, optimizing ingestion performance and scalability for environments with large volumes of compliance data while keeping remediation and compliance tracking aligned with the current state of findings.\n\n-   **[Unified Microsoft Defender Integration for Security Exposure Management](https://www.servicenow.com/docs/access?context=ms-defender-sem&family=zurich&ft:locale=en-US)**\n\nThe Microsoft Defender for Cloud and Microsoft Defender Threat and Vulnerability Management \\(MS TVM\\) plugins are now consolidated into a single plugin: Microsoft Defender Integration for Security Exposure Management. This consolidation deprecates the standalone Microsoft Defender for Cloud plugin. The unified plugin also introduces container image vulnerability ingestion from Microsoft Defender for Cloud, creating Container Vulnerable Items on your instance. A guided migration path is available to transfer existing data from the deprecated applications to the unified plugin.\n\n\n -   **[Qualys Integration – API enhancements](https://www.servicenow.com/docs/access?context=qualys-rest-messages-cc&family=zurich&ft:locale=en-US)**\n\nQualys Integration has been upgraded to support newer Qualys API versions across Host Detection, Host List, Knowledgebase, PC Controls, PC Policies, and PCRS integrations. The integrations now ingest additional data fields, including vulnerability detection source, authentication privilege status, active status for controls and policies, and cloud metadata, giving you better visibility into your vulnerability and compliance data. Use the new `posture_api_version` integration instance parameter to choose between the default v2.0 APIs or the newer v5.0 streaming APIs for the PCRS Policy Host and PCRS Test Results integrations.\n\n\n -   **[Enhancements to the Vulnerability Response Integration with Wiz](https://www.servicenow.com/docs/access?context=vr-wiz-exploring-host-cf&family=zurich&ft:locale=en-US)**\n\nThe Missing Assets \\[sn\\_vul\\_wiz\\_missing\\_asset\\] is deprecated. After updating to version 1.1, you must backdate your existing primary Wiz integrations by three days and run them.\n\nThe backfill integrations are activated by default.\n\nAfter you backdate and run your integrations, the following backfill integrations are no longer required:\n\n    -   Host Vulnerability Backfill Integration\n    -   Test Results Backfill Integration\n    -   Host Test Results Backfill Integration\n    -   Issues Backfill Integration\nThe \\[is\\_ignored\\] column is deprecated for the Host Test Results and Test Results Integrations. This column was replaced by the \\[is\\_result\\_ignored\\] column.\n\nSource severity is mapped to the Priority column on the Test Results \\[sn\\_vulc\\_result\\] table.\n\nResource type filters are on the Test Results, Issues, and Host Test Results configuration tabs on the Wiz Configuration page. You can add any of the resource types listed.\n\n**Note:**\n\nIf you configure resource types on the Resource Type Configuration tab, and you choose to configure parameters on the integration instance records, your configurations on integration instance take precedence over your settings on the Resource Type Configuration tab. See [Identify Wiz Resource types](https://www.servicenow.com/docs/access?context=wiz-assets-resources-tab&family=zurich&ft:locale=en-US) for more information.\n\nAdditional attributes imported from Wiz that are not stored in the Discovered items \\[sn\\_sec\\_cmn\\_src\\_ci\\] table are stamped with `Asset Attributes` in this table.\n\nTest results from the Host misconfiguration integration are classified as result type 'host\\_misconfiguration'.\n\nData for resources that have the validated\\_at\\_runtime flag set to 'yes' is imported and populated on detections.\n\nThe is\\_ignored column is deprecated on the Host Test Results and Test Results Integrations. This column was replaced by the is\\_result\\_ignored column.\n\nThe CMDB internet-facing field on the discovered item is mapped to Limited Internet Exposure on findings.\n\nColumn length for the descriptions in the Host Vulnerability import table has been increased.\n\n\n -   **[Identify Wiz Resource Types for import](https://www.servicenow.com/docs/access?context=wiz-assets-resources-tab&family=zurich&ft:locale=en-US)**\n\nIdentify the Resource Types \\(assets\\) reported by Wiz in your environment on the Wiz Integration Resource Type configuration page in your ServiceNow AI Platform instance that you want to import.\n\nThe Resource Types that you select apply to all the primary Wiz vulnerability and compliance integrations except the Wiz Container Vulnerability Integration.\n\n-   **[Wiz Backfill Integrations](https://www.servicenow.com/docs/access?context=wiz-backfill&family=zurich&ft:locale=en-US)**\n\nRetrieve and process data stored on the Wiz Missing Assets \\[sn\\_vul\\_wiz\\_missing\\_asset\\] table for missing assets that were not processed by the primary compliance integrations with specialized Wiz Backfill Integrations.\n\n    -   Test Results Backfill Integration\n    -   Host Test Results Backfill Integration\n    -   Issues Backfill Integration\nThe Wiz Backfill Integrations are activated by default.\n\n-   **[Wiz Host Test Result Vulnerability Integration](https://www.servicenow.com/docs/access?context=wiz-host-test-result-tab-filters&family=zurich&ft:locale=en-US)**\n\nImport test results associated with the resource type, `VIRTUAL MACHINE` with the Wiz Host Test Result Vulnerability Integration. This integration is activated by default.\n\n\n -   **[Qualys parameter to ignore passed test results](https://www.servicenow.com/docs/access?context=Qualys-cc-Integration&family=zurich&ft:locale=en-US)**\n\nStarting with v15.2.5 of Configuration Compliance, the ignore\\_passed\\_result integration instance parameter for the Qualys Integration for Security Operations has been added.\n\nThis parameter is set to `false` by default so that passed test results imported by Qualys are not ignored.\n\nSet the parameter to **true** to ignore passed test results on import.\n\n**Note:** If activated, this parameter does not impact closure of the test results. For example, if you activate the parameter, and a failed test result from a previous import has since passed, it will be closed correctly.\n\n-   **[The Wiz Configuration Compliance \\(Test Results\\) and Issues Integrations](https://www.servicenow.com/docs/access?context=vr-wiz-exploring-host-cf&family=zurich&ft:locale=en-US)**\n    -   Import configuration test results with the Wiz Configuration Compliance Integration \\(Wiz Test Results\\) to detect non-compliant cloud configurations. Findings are mapped to cloud test results \\(CTRs\\) in the Configuration Compliance application to help you enforce security policies and standards across your cloud environment.\n    -   Import data with the Wiz Issues Integration that can help you identify assets that are involved in toxic combinations of vulnerabilities and misconfigurations. These findings are also mapped to CTRs with `Wiz Issues` labeled as the source to help you track and remediate assets that may pose complex multi-vector risks.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   **[Activate the Wiz Asset Integration and identify resource types for import](https://www.servicenow.com/docs/access?context=wiz-assets-resources-tab&family=australia&ft:locale=en-US)**\n\nEnhancements to the Wiz integration include:\n\n    -   Starting with version 32.1 \\(USEM\\) and version 4.1 \\(non-USEM\\), the Asset integration is deactivated by default. It is not a mandatory prerequisite for the other Wiz integration imports.\n\nIf you choose to activate it, the Asset integration will retrieve assets for all resource types if you don't specify the ones you want on the **Asset Integration Configuration** tab. To avoid importing vulnerability data you don't need, identify only the resources \\(assets\\) that you want to import with this integration.\n\n    -   Resource Type is no longer a mandatory field for configuring the Vulnerability Response Integration with Wiz. You can now save Wiz configurations for the integrations without specifying a Resource Type, simplifying setup for use cases where specifying a Resource Type isn't appropriate.\n\n -   **[Compliance test uniqueness key](https://www.servicenow.com/docs/access?context=cc-tenable-compliance-test-uniqueness-key&family=australia&ft:locale=en-US)**\n\nYou can now configure which identifier the system uses to uniquely match incoming Tenable conformance test records. Previously, conformance tests were identified by the check\\_id field, which caused records to be overwritten when multiple tests shared the same control identifier. You can now select the identifier that best matches how your Tenable data is structured \\(**compliance\\_control\\_id**, **check\\_id**, or **compliance\\_functional\\_id**\\), ensuring test records are accurately preserved during ingestion.\n\n\n -   **[AWS Integration for Security Exposure Management](https://www.servicenow.com/docs/access?context=aws-integration-for-security-exposure-management-overview&family=australia&ft:locale=en-US)**\n\nThe AWS Integration for Security Exposure Management supports integrations with the following AWS services:\n\n    -   AWS Inspector is an automated vulnerability management service that continuously scans EC2 instances, ECR container images, and Lambda functions for software vulnerabilities \\(CVEs\\) and unintended network exposure. The Vulnerability Response integration with AWS Inspector imports host and container vulnerability findings from AWS Inspector.\n    -   AWS Security Hub is a security service that is used to centralize and update security checks across AWS accounts. It provides a unified view of security alerts and conformance status by integrating with various AWS services. The Vulnerability Response integration with AWS Security Hub imports host, container vulnerabilities, and misconfigurations from AWS Security Hub.\n-   **[Optimized Tenable.io Compliance Results ingestion](https://www.servicenow.com/docs/access?context=tenableIntegration&family=australia&ft:locale=en-US)**\n\nStarting with v 6.1.3, the Tenable.io conformance Results Integration is replaced by the Tenable.io Fixed conformance Results Integration and Tenable.io Open conformance Results Integration. conformance results are now imported based on their status, optimizing ingestion performance and scalability for environments with large volumes of conformance data while keeping remediation and conformance tracking aligned with the current state of findings.\n\n-   **[Qualys Integration – API enhancements](https://www.servicenow.com/docs/access?context=c_QualysVulnIntegration&family=australia&ft:locale=en-US)**\n\nThe Qualys Vulnerability Integration has been upgraded to support newer Qualys API versions across Host Detection, Host List, Knowledgebase, PC Controls, PC Policies, and PCRS integrations. The integrations now ingest additional data fields, including vulnerability detection source, authentication privilege status, active status for controls and policies, and cloud metadata, giving you better visibility into your vulnerability and conformance data. Use the new `posture_api_version` integration instance parameter to choose between the default v2.0 APIs or the newer v5.0 streaming APIs for the PCRS Policy Host and PCRS Test Results integrations.\n\n-   **[Unified Microsoft Defender Integration for Security Exposure Management](https://www.servicenow.com/docs/access?context=ms-defender-sem&family=australia&ft:locale=en-US)**\n\nThe Microsoft Defender for Cloud and Microsoft Defender Threat and Vulnerability Management \\(MS TVM\\) plugins are now consolidated into a single plugin: Microsoft Defender Integration for Security Exposure Management. This consolidation deprecates the standalone Microsoft Defender for Cloud plugin. The unified plugin also introduces container image vulnerability ingestion from Microsoft Defender for Cloud, creating Container Vulnerable Items on your instance. A guided migration path is available to transfer existing data from the deprecated applications to the unified plugin.\n\n-   **[Remediation task rule execution mode](https://www.servicenow.com/docs/access?context=sem-grouping-multiple-findings-remediation-tasks-processing&family=australia&ft:locale=en-US)**\n\nYou can now choose how remediation task rules are evaluated during ingestion. The new Match First execution mode evaluates rules sequentially and applies only the first matching rule, assigning each finding to exactly one remediation task. The default Match All mode continues to evaluate all applicable rules.\n\n\n -   **Enhancements to the Vulnerability Response Integration with Wiz**\n\nEnhancements to the Wiz integration that imports cloud configuration findings as Test Results in Configuration Compliance. Configuration issues related to AI assets, such as AI models and agents are routed into AI security exposure management tables \\(AI posture findings\\).\n\nThis enhancement helps with better visibility within AI Control Tower and for any AI-specific remediation workflows to be added in the future. The 'Send AI security findings to AI security exposure management' configuration setting has been added to the Wiz Test Results integration configuration page so that AI security findings are routed into AI security exposure management.\n\n-   **[Qualys parameter to ignore passed test results](https://www.servicenow.com/docs/access?context=Qualys-cc-Integration&family=australia&ft:locale=en-US)**\n\nStarting with v15.2.5 of Configuration Compliance, the ignore\\_passed\\_result integration instance parameter for the Qualys Integration for Security Operations has been added.\n\nThis parameter is set to `false` by default so that passed test results imported by Qualys aren't ignored.\n\nSet the parameter to **true** to ignore passed test results on import.\n\n**Note:** If activated, this parameter does not impact closure of the test results. For example, if you activate the parameter, and a failed test result from a previous import has since passed, it will be closed correctly.\n\n\n</td></tr></tbody>\n</table>## Changes\n\nBetween your current release family and Australia, some changes were made to existing Configuration Compliance features.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\n-   **[Test result and remediation task state transitions](https://www.servicenow.com/docs/access?context=spc-findings-state-transition&family=xanadu&ft:locale=en-US)**\n\nEnhancements to policy audits for Security Posture Control verify that retired assets are not evaluated by activated policies. If the state of an asset transitions from **Retired** back to **Active**, it is included in the next policy evaluation.\n\n-   **[Non-zero risk score for passed test results](https://www.servicenow.com/docs/access?context=cc-rollupcalc-example&family=xanadu&ft:locale=en-US)**\n\nThe risk score is calculated for passed test results to determine how much risk is mitigated.\n\n-   **[Deprecated the privilege to delete a test result for the Admin role](https://www.servicenow.com/docs/access?context=installed-with-config-compliance&family=xanadu&ft:locale=en-US)**\n\nAs an admin with the sn\\_vulc.admin role, you can’t delete a test result. This privilege is now given to the sn\\_vulc.delete granular role.\n\n\n-   **[Updates to the Risk Score calculation for a Remediation Task](https://www.servicenow.com/docs/access?context=v11create-rollup-calc&family=xanadu&ft:locale=en-US)**\n\nThe average risk score of all the test results in a Remediation Task is considered for the risk score calculation of a Remediation task.\n\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   **[Remediation task rule execution mode](https://www.servicenow.com/docs/access?context=sem-grouping-multiple-findings-remediation-tasks-processing&family=zurich&ft:locale=en-US)**\n\nYou can now choose how remediation task rules are evaluated during ingestion. The new Match First execution mode evaluates rules sequentially and applies only the first matching rule, assigning each finding to exactly one remediation task. The default Match All mode continues to evaluate all applicable rules.\n\n-   **[Optimized Tenable.io Compliance Results ingestion](https://www.servicenow.com/docs/access?context=tenable-io-integrations-list&family=zurich&ft:locale=en-US)**\n\nStarting with v\\[VERSION\\], the Tenable.io Compliance Results Integration is replaced by the Tenable.io Fixed Compliance Results Integration and Tenable.io Open Compliance Results Integration. Compliance results are now imported based on their status, optimizing ingestion performance and scalability for environments with large volumes of compliance data while keeping remediation and compliance tracking aligned with the current state of findings.\n\n-   **Optimized Tenable.io Compliance Results ingestion**\n\nStarting with v\\[VERSION\\], the Tenable.io Compliance Results Integration is deprecated and replaced by the Tenable.io Fixed Compliance Results Integration and Tenable.io Open Compliance Results Integration. Compliance results are now imported based on their status, optimizing ingestion performance and scalability for environments with large volumes of compliance data while keeping remediation and compliance tracking aligned with the current state of findings.\n\n\n -   **[Qualys Integration – API enhancements](https://www.servicenow.com/docs/access?context=qualys-rest-messages-cc&family=zurich&ft:locale=en-US)**\n\nQualys Integration has been upgraded to support newer Qualys API versions across Host Detection, Host List, Knowledgebase, PC Controls, PC Policies, and PCRS integrations. The integrations now ingest additional data fields, including vulnerability detection source, authentication privilege status, active status for controls and policies, and cloud metadata, giving you better visibility into your vulnerability and compliance data. Use the new `posture_api_version` integration instance parameter to choose between the default v2.0 APIs or the newer v5.0 streaming APIs for the PCRS Policy Host and PCRS Test Results integrations.\n\n\n -   **[Configure Test Result Granularity](https://www.servicenow.com/docs/access?context=cc-tenable-tr-granularity&family=zurich&ft:locale=en-US)**\n\nStarting with v15.6.1, you can configure the granularity of Tenable Configuration Test Results \\(CTRs\\) to split results into unique findings. For example, if a database has five instances, the system generates five distinct test results, one per instance, providing improved visibility into individual patching efforts.\n\n\n -   **[Configure Test Result Granularity](https://www.servicenow.com/docs/access?context=cc-qualys-tr-granularity&family=zurich&ft:locale=en-US)**\n\nStarting with v15.4.3, you can configure the granularity of Qualys Configuration Test Results \\(CTR\\) in configuration compliance and split CTRs into unique findings. For example, if a database has five instances, the system generates five distinct test results, one per instance, providing improved visibility into individual patching efforts.\n\n-   **[Configure maximum rows in related lists](https://www.servicenow.com/docs/access?context=vr-max-rows-rel-list&family=zurich&ft:locale=en-US)**\n\nTo improve readability and performance, you can now limit the number of rows shown in related lists on forms by setting the system property **sn\\_vul\\_cmn.related\\_list.set\\_max\\_row**.\n\n-   **[Improved state management for remediation tasks and vulnerable items](https://www.servicenow.com/docs/access?context=vr-rt-states&family=zurich&ft:locale=en-US)**\n\nState management logic for roll down of state from remediation tasks \\(RTs\\) to findings and roll up of state from findings to RTs has been refined across all modules. Updates improve accuracy by handling mixed item states \\(a combination of Deferred and Closed\\), supporting closure of tasks in sub-states like In-Review, and reopening tasks based on the Assigned To field. The update also improves handling of False Positive state transitions based on scanner results as source of truth. These enhancements reduce manual effort, clarify task ownership, and streamline remediation workflows.\n\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Removed\n\nBetween your current release family and Australia, some Configuration Compliance features or functionality were removed.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\n-   The **Reason** field in the Resolve modal has been removed for a remediation task in the classic UI, Vulnerability Manager Workspace, and IT Remediation Workspace.\n-   The **Close** button has been removed for a remediation task, in the classic UI, Vulnerability Manager Workspace, and IT Remediation Workspace.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Deprecations\n\nBetween your current release family and Australia, some Configuration Compliance features or functionality were deprecated.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Activation information\n\nReview information on how to activate Configuration Compliance.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\n-   **Activation information**\n\nInstall Configuration Compliance by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US).\n\n\n**Important:** Configuration Compliance is available in the ServiceNow Store. For details, see the \"Activation information\" section of these release notes.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   **Activation information**\n\nInstall Configuration Compliance and third-party integrations by requesting them from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US).\n\n\n**Important:** Configuration Compliance is available in the ServiceNow Store. For details, see the \"Activation information\" section of these release notes.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   **Activation information**\n\nInstall Configuration Compliance and third-party integrations by requesting them from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=australia&ft:locale=en-US).\n\n\n**Important:** Configuration Compliance is available in the ServiceNow Store. For details, see the \"Activation information\" section of these release notes.\n\n</td></tr></tbody>\n</table>## Additional requirements\n\nIf any additional requirements were introduced or changed for Configuration Compliance we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Browser requirements\n\nIf any specific browser requirements were introduced or changed for Configuration Compliance we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Accessibility information\n\nReview details on accessibility information for Configuration Compliance, such as specific requirements or compliance levels.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   **Accessibility information**\n    -   **Dark theme**\n\nThe new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability.\n\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Localization information\n\nIf there are specific localization considerations for Configuration Compliance we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Highlight information\n\nIf there are specific highlight considerations for Configuration Compliance we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\n-   Reevaluate the risk score, assignments, remediation target date, exceptions, and remediation task for a set of test results in Vulnerability Manager Workspace.\n-   View the percentage of CI compliance and test results compliance on a Test Group in Vulnerability Manager Workspace.\n\n See [Configuration Compliance](https://www.servicenow.com/docs/access?context=vr-config-compliance-landing&family=xanadu&ft:locale=en-US) for more information.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\n-   With the sn\\_vulc.admin role, create remediation tasks manually in the Vulnerability Manager Workspace.\n-   With the sn\\_vulc.remediation\\_owner role, create remediation tasks manually in the IT Remediation Workspace.\n\n See [Configuration Compliance](https://www.servicenow.com/docs/access?context=vr-config-compliance-landing&family=yokohama&ft:locale=en-US) for more information.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   If you are currently using Configuration Compliance and you want to upgrade to Unified Security Exposure Management \\(USEM\\), see [Unified Security Exposure Management release notes](https://www.servicenow.com/docs/access?context=secops-sem-rn&family=zurich&ft:locale=en-US) for more information about USEM and the Unified Security Exposure Management migration.\n-   Import Wiz issues and configuration test results from the Wiz scanners into test results in the Configuration Compliance application with the Vulnerability Response Integration with Wiz.\n-   With the sn\\_vulc.remediation\\_owner role, create remediation tasks manually in the IT Remediation Workspace.\n-   With the sn\\_vulc.admin role, create remediation tasks manually in the Vulnerability Manager Workspace.\n\n See [Configuration Compliance](https://www.servicenow.com/docs/access?context=vr-config-compliance-landing&family=zurich&ft:locale=en-US) for more information.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   The AWS Integration for Security Exposure Management supports integrations with AWS Inspector and AWS Security Hub.\n-   If you're currently using Configuration Compliance and you want to upgrade to Unified Security Exposure Management \\(USEM\\), see [Unified Security Exposure Management \\(USEM\\) release notes](https://www.servicenow.com/docs/access?context=secops-sem-rn&family=australia&ft:locale=en-US) for more information about USEM and the Unified Security Exposure Management migration.\n-   Import Wiz issues and configuration test results from the Wiz scanners into test results in the Configuration Compliance application with the Vulnerability Response Integration with Wiz.\n-   With the sn\\_vulc.remediation\\_owner role, create remediation tasks manually in the IT Remediation Workspace.\n-   With the sn\\_vulc.admin role, create remediation tasks manually in the Vulnerability Manager Workspace.\n\n See [Configuration Compliance](https://www.servicenow.com/docs/access?context=vr-config-compliance-landing&family=australia&ft:locale=en-US) for more information.\n\n</td></tr></tbody>\n</table>**Parent Topic:**[Products combined by family](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/delta-xanadu-australia/rn-combined-intro.md)\n\n"}}