{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":43753,"path":"security-management/configuration-compliance/view-vuln-config-compl-tests.md","title":"View Configuration Compliance tests","bundle":null,"doc_type":null,"release":"australia","body":"\n# View Configuration Compliance tests\n\nUse this module to research detailed information about these tests. Included are the expert source citations that were used when creating them, the third-party configuration policies in which they are used, and the results obtained from the scan.\n\n## Before you begin\n\nRole required:\n\n- sn\\_vulc.admin to update\n- sn\\_vulc.remediation\\_owner to view\n\n**Note:** Starting with v14.9 of Configuration Compliance, the following terms have been renamed:\n\n|Terminology prior to v14.9|Terminology v14.9 onwards|\n|--------------------------|-------------------------|\n|Test Result Group|Remediation Task|\n|Group Rules|Remediation Task Rules|\n|Policy|Test group|\n\n## Procedure\n\n1. Navigate to **All** > **Configuration Compliance** > **Controls**.\n\n2. Navigate to **All** > **Configuration Compliance** > **Tests**\n\n3. From the list, open the control \\(compliance test\\) you want to view.\n\n Starting with version 12.0, to update these values on-demand, below the Remediation status tab, click the **Update Status** Related link. A message is displayed that indicates the data is being refreshed. Click the **View status** link to view progress on the update. After a few moments, any data that has changed or been updated since the last scheduled job are refreshed on the record. Field values such as the**Risk Score**, **Risk Rating**, **Remediation target date**, **State**, and the fields on the **Remediation Status** tab are refreshed.\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nNumber\n\n\n\nNumber assigned to the control during the import process.\n\n
\n\nResult\n\n\n\nStatus of the scan. Pass or Fail. If this test belongs to multiple remediation tasks, then its state is determined following an [order of precedence](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/configuration-compliance/vuln-config-compl-correlation.md).\n\n
\n\nSource\n\n\n\nSystem name of the third-party integration application, or the name entered in the plugin for the API that is used to communicate with Configuration Compliance.\n\n
\n\nCriticality\n\n\n\nSeverity of the configuration issue or issues associated with the control as defined in the third-party integration. The level of criticality is adjusted to match the granularity of similar vulnerability indicators available in Vulnerability Response. The possible levels are: - **Critical**\n\nThe configuration issue associated with the control is causing a disruption to one or more business-critical CIs.\n\n- **High**\n\nThe configuration issue associated with the control is a threat, but is not causing a shutdown of critical network resources.\n\n- **Moderate**\n\nThe configuration issue associated with the control is a risk, but is not an immediate threat.\n\n- **Low**\n\nThe configuration issue associated with the control is a low-level threat and can be ignored in favor of CIs that are at greater risk.\n\n- **Minor**\n\nThe configuration issue associated with the control is a minor risk and can be ignored if necessary.\n\n
\n\nSource ID\n\n\n\nIdentifier assigned to the control by the third-party integration.\n\n
\n\nCategory\n\n\n\nMajor classification category given to this type of control by the third-party vendor.\n\n
\n\nRisk score\n\n\n\nThis is a rollup risk score. This risk score is weighted, with 85% of the score from the max risk score across all Test Results not 'Closed' \\(Open, Under Investigation, Awaiting Implementation, Deferred, Resolved\\), and 15% of the score from the number of test results that are not 'Closed'.Value calculated by risk score calculators that is based on the business criticality and test criticality values of test results.\n\n
\n\nSub-category\n\n\n\nSub-category assigned to this class of test by the third-party vendor.\n\n
\n\nRisk rating\n\n\n\nBased on a range of risk scores on a 1-5 numeric scale that rates overall risk based on a range of risk scores as 1 - Critical to 5 - None. This field replaces the Priority field in previous versions.\n\n
\n\nTechnologies\n\n\n\nList of technologies covered by this test.\n\n
\n\nSource created\n\n\n\nDate the test was first defined in the third-party integration.\n\n
\n\nSource updated\n\n\n\nDate the test was last updated in the third-party integration.\n\n
\n\nShort description\n\n\n\nSummary description or title entered or assigned to the test in the third-party integration.\n\n
\n\n**Remediation Status \\(v 12.0\\)**\n\n
\n\nExcludes Deferred\n\n\n\nThese values do not include deferred test results.\n\n - **Open test results**: The number \\(count\\) of active \\(any state other than **Closed**\\) test results for this configuration test.\n- **% Test results remediated**: The percent of remediated test results for this remediation task.\n- **Total test results**: The total number of test results for this remediation task.\n\n\n
\n\nIncludes Deferred\n\n\n\nThese values include deferred test results.\n\n - **Open test results**: The number \\(count\\) of all active \\(any state other than **Closed**\\) test results for this remediation task.\n- **% Test results remediated**: The percent of remediated test results for this remediation task.\n- **Total test results**: The total number of test results for this remediation task.\n\n\n
\n\nDescription\n\n\n\nLong description of the test. For the Qualys Vulnerability Integration, this field defaults to the contents of the Qualys Cloud Platform cover page.\n\n
\n\nRemediation\n\n\n\nSteps instructions describing how to remediate the non-compliance.\n\n
\n\n**Related Tabs**\n\n
\n\nCitations\n\n\n\nList of citations entered for each authoritative source associated with the test.\n\n
\n\nTest Groups\n\n\n\nList of Configuration Compliance test groups that use this test.\n\n
\n\nTest Results\n\n\n\nList of CIs affected by the configuration issue or issues associated with this test. You can access individual tests, ServiceNow configuration items, or the list of affected technologies, if necessary.\n\n
\n\nGRC Policy Statements\n\n\n\nIf the GRC Policy and Compliance Management plugin is installed, this tab contains the related GRC policy. You can edit this list to add or remove policy statements.\n\n
\n"}}