Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
By integrating ServiceNow's IT Service Management (ITSM) module with Microsoft Defender for Cloud, you can create governance rules that automatically open tickets in ServiceNow for specific recommendations or severity levels. You can create, view, and link ServiceNow tickets to recommendations directly from Defender for Cloud. This integration enables seamless collaboration between the two platforms and facilitates efficient incident management.
Prerequisites
Before you create governance rules, ensure you meet the following requirements:
Defender Cloud Security Posture Management (CSPM) enabled on your Azure subscription.
Admin permissions to ServiceNow to create an assignment.
Assign an owner with a governance rule
You can create a governance rule to automatically assign an owner to a recommendation in Defender for Cloud. The rule can be based on either the recommendation's severity or a specific recommendation.
Sign in to the Azure portal.
Go to Microsoft Defender for Cloud > Environment settings.
Select Governance rules.
Select Create governance rule.
Enter a rule name and select a scope.
In the Type field, select ServiceNow.
Enter a priority.
Select an integration instance.
Select a ServiceNow ticket type.
Select Next.
Select either:
- By Severity and the severity level.
- By recommendation and the recommendation.
Select an owner.
Select a remediation timeframe.
(Optional) Select whether to apply a grace period.
(Optional) Set email notifications.
Select Create.
