Cisco Vulnerability Management vs. ServiceNow Security Operations

It works well when interfacing with Qualys VM QualysGuard to highlight server vulnerabilities, providing details on the affected packages and programs, along with solutions and links to the provider's websites, so our servers can be kept safe by quickly addressing issues. Because vulnerability scores are assigned, we can prioritize which servers to address first.

Incentivized

Tight integration across ticketing, CMDB and ServiceNow Security Operations workflows automation module definitely stand out. In addition, the mean time to detection has reduced in my organization leading to a more efficient security operations with less burnout.

Incentivized

• Vulnerability tracking
• Risk Meter reporting to pinpoint specific systems or vulnerabilities
• Provides vulnerability scores to see what is high / medium / low urgency

Incentivized

• Automatically creates a ticket for security incidents.
• Complete root cause Analysis of the problem.
• Ability to provide more knowledge because of threat intelligence.

Incentivized

• The layout of the information could use some improvement.

Incentivized

• Even though I mentioned that we built incident response playbooks, we found the learning curve to be steep, having drag and drop or something similar to this would be appreciated

Incentivized

CVM provides a very easy to understand and use interfaces. Dashboards and reporting are compiled nicely when risk meters are created. After initial setup of software cisco onboarding teams do an amazing job going over all areas of this software to provide best overall usability of the product. Against other tools setup and usability is at a higher standard

Incentivized

Seamless integration across modules mentioned in the previous sections along with the ability to automate security workflows are the main reasons.

Incentivized

We run a flavor of multiple products and CVM enhances/complements those tools by pinpointing where the vulnerabilities are at on our network. Intune and Automox being products CVM works well with when its time to patch affected systems. Tenable we used prior to CVM and its product was too complex and clunky and always had issues with asset duplication. CVM simplified vulnerability scanning and made it a lot easier to manage compared to Tenable

Incentivized

Instead of integrating Spunk to ServiceNow ticketing and asset tool, I was able to get a native built in integration across ServiceNow modules and this helped a lot.

Incentivized

• Has kept our company safe from exploits.

Incentivized

• Positive ROI since most of the security incidents can be closed via a security centre.

Incentivized