Get Started with Qualys CSPM Integration with ServiceNow

This guide explains how to integrate Qualys Cloud Security Posture Management (CSPM) with your cloud environment. The integration enables continuous monitoring of cloud resources to quickly identify misconfigurations, reduce security risks, and ensure compliance with industry standards.

CSPM Integration Overview

The Qualys Cloud Security Posture Management (CSPM) integration ensures that cloud resources comply with configuration standards by fetching and analyzing data such as policies, controls, connectors, evaluations, and resources. It helps detect misconfigurations in the cloud infrastructure and automates the remediation process to address them. By leveraging this integration, they can maintain compliance with industry security standards, adhere to best practices, and enhance the overall security posture of their cloud environment.

Qualys CSPM - ServiceNow Integration Workflow

The integration is triggered either manually or on a scheduled basis to synchronize data between the Qualys TotalCloud platform and ServiceNow Vulnerability Response. It retrieves compliance data, including policies, controls, evaluations, and resource test results, while using filtered data retrieval to ensure only the latest updates are processed. Based on these test results, the integration creates new remediation tickets or updates existing ones in real time. When a resource status changes, the corresponding remediation ticket is automatically updated. The integration also assigns test results and remediation tickets to the appropriate assignment groups according to the configured assignment and remediation rules.

CSPM Integration Features

The following are the features of Qualys CSPM-ServiceNow integrations:

• Ability to fetch all data of policies, controls, connector details of AWS, Azure, GCP, and OCI cloud, evaluations, and based on that, evaluate the resources from the Qualys TotalCloud platform.

• Based on updated resources (test results) and their status from the Qualys TotalCloud platform, remediation tickets are created.

• Update the remediation ticket status when the test result status changes.

• The Remediation ticket gets linked with the assignment group.

• A Remediation ticket is created for the resources if their status changes from Pass to Fail.

• All Vulnerability Integrations can be triggered manually or scheduled to execute periodically.

References

Refer to the following documents for more help with the CSPM-ServiceNow integration.