{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":45690,"path":"security-management/threat-intelligence-security-center/tisc-vul-mgmt.md","title":"Vulnerability Management Support","bundle":null,"doc_type":null,"release":"australia","body":"\n# Vulnerability Management Support\n\nLearn how a new vulnerability is created in TISC with a related vulnerability in VR.\n\n## Before you begin\n\nRole required:\n\n-   System Administrator \\(view, create or edit\\)\n-   sn\\_sec\\_tisc.admin \\(view\\)\n\n## About this task\n\nWhen new vulnerability is created in TISC and there is a related vulnerability in VR.\n\n-   If VR vulnerability\\(v2\\) score is > 8 OR VR vulnerability\\(v3\\) score is > 8.\n-   Total VI’s associate to it are greater than 0.\n\n## Procedure\n\n1.  Navigate to **All** > **Threat Intelligence Security Center** > **Administration**.\n\n2.  Select **Automated Flows**.\n\n3.  Select **Vulnerability Management Support** action link to view the respective rule details in the flow designer.\n\n4.  View the flow designer action for the following trigger:\n\n    ```\n    When new vulnerability is created in TISC and there is a related vulnerability in VR.\n    ```\n\n5.  **If the percentage of total VI’s remediated that are associated to that vulnerability is 100%, then:**\n\n    1.  Add a tag called Remediated to the observable.\n\n6.  **Else, enrich the observable data with available capabilities:**\n\n    1.  Create a remediation task for VR.\n\n    2.  Notify the concerned VR team’s regarding it.\n\n        \\[Omitted image \"tisc-vul-mgmt-support.png\"\\] Alt text: Vulnerability management support\n\n\n**Parent Topic:**[Working with automated flows](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-automated-flows.md)\n\n**Related topics**  \n\n\n[Automated IOC Enrichment]()\n\n[Automated sharing of high-risk IOC's with trusted partners]()\n\n[Automatically add threat intelligence to a TAXII collection]()\n\n[Create vulnerability assessment for zero day]()\n\n[Analyze, assess, and disseminate observables]()\n\n[Analyze and assess threat IoC’s]()\n\n[Zero-day vulnerability tracking]()\n\n[Automatic Threat Actor priority tagging]()\n\n[Automated flows tables]()\n\n"}}