ServiceNow for VRM Breach Incident Details

Adding breach incidents to the vendor risk form

In SecurityScorecard for Vendor Risk Management, you can view vendor breach incident details in a related list, which lets you build security workflows around breaches in your vendor supply chain. Follow these steps to configure breach incident details in a related list.

1. Log in as a system administrator.
2. Use the Application Scope picker to switch to the Third-Party Risk Management scope.
3. Navigate to Third-Party Risk Management > Third-Parties > All Third-Parties.
4. Open a third-party record (for example, Amazon).
5. Click the three lines.
   
6. Go to Configure > Related Lists.
   
7. In the Available bucket on the left, find the related list named “SecurityScorecard Breach Incidents.”
8. Move this related list to the end of the Selected bucket.
   
9. Click Save.
10. Confirm that the SecurityScorecard Breach Incidents related list now appears on the vendor risk form.
    
11. Navigate to SecurityScorecard for Vendor Risk > Application Setup > Schedulers.
12. Open the active scheduler record that runs daily.
13. On the form, find the field named “Collect breach events start date.”
    • If this field is not on the form, add it.
14. In this field, set the date to a past date, or leave it empty to import all historical breach incidents for synchronized vendors. 
    
    • This date imports any breach incidents created in the SecurityScorecard platform on or after 11/07/2024.
    • Each time the integration runs, it updates this date automatically so that it does not pull historical data on every run.
15. After you change the date, click Save to save the scheduler record.

16. Click Execute Now to import breach incidents and update all synchronized vendor scores.

    Note: Breach incidents are imported only for synchronized vendors.

17. To view all breach incidents in one place, use the Breach Incidents application module, located in the application navigator under SecurityScorecard for Vendor Risk > Breach Incidents. This module shows all imported breach incidents.
    • If you do not see this module, unfavorite the SecurityScorecard for Vendor Risk application modules, refresh the browser, then find the app and add it to your favorites again.