ServiceNow Configuration Compliance Integration with TotalCloud CSPM

Configuration Compliance in ServiceNow is a solution designed to identify, prioritize, and remediate misconfigurations in deployment-stage assets and cloud environments. Now, you can integrate your Qualys TotalCloud CSPM deployment with ServiceNow CC to import configuration test results and data. These tests evaluate settings such as password policies or security controls, grouped into policies tailored to organizational needs.

Benefits

• Multi-cloud Support: Support all major public cloud providers, such as AWS, Azure, GCP, and OCI, for importing assessment data.

• Automatic Sync: All policy and control evaluations from TotalCloud CSPM are automatically synced with ServiceNow CC for its analysis.

• Cloud Configuration Management: The solution enables filtering by metadata, such as cloud account, region, and resource tags, to effectively manage and remediate cloud-specific configuration issues.

• Automated Remediation: Access remediation recommendations, automatically create remediation tasks, and assign them to corresponding workflows. Remediation target rules define deadlines, ensuring timely resolution. Exceptions can be requested for non-critical failures, and follow-up scans confirm fixes. 

• Enhanced Reporting: Leverage the out-of-the-box dashboard for visibility into misconfigurations with detailed reports, including failed test results filtered by risk rating, technology, and category. The dashboard also tracks remediation tasks by state and risk level, providing actionable insights for security teams

Prerequisites

• Access to an active Qualys Subscription with TotalCloud activated in either trial or paid license. 
• Deployment of the cloud connectors in Qualys and enablement of CSPM capability. Read more.

Activation

To activate the ServiceNow integration, follow the installation guide available at ServiceNow - Qualys CSPM Installation Guide

You can get started with the integration by visiting the ServiceNow Store.