{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":46032,"path":"security-management/vulnerability-response/mstvm-prep-checklist.md","title":"Set up Microsoft Threat and Vulnerability Management Vulnerability integrations for Security Exposure Management","bundle":null,"doc_type":null,"release":"australia","body":"\n# Set up Microsoft Threat and Vulnerability Management Vulnerability integrations for Security Exposure Management\n\nPrepare for the integration installation and configuration by performing setup tasks.\n\n## Before you begin\n\nUse this checklist to verify the items listed are completed before you install the application and import vulnerability data into your ServiceNow AI Platform® instance.\n\n\n
\n\nTask\n\n\n\nDescription\n\n
\n\n\\[Omitted image \"checkbox.png\"\\] Alt text: Checkbox image.\n\n\n\nVerify that you have one of the following sets of information:- ClientSecret, ClientId, and TenantId for your MS TVM account\n- Username, Password, ClientId, and TenantId for your MS TVM account. To obtain this information, see [Set up Microsoft Azure for the MS TVM integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/mstvm-azure-account.md).\n\n
\n\n\\[Omitted image \"checkbox.png\"\\] Alt text: Checkbox image.\n\n\n\nIf not already installed and activated, install the Vulnerability Response application before you install the third-party application. The Setup Assistant you use to configure the integrations is included with the Vulnerability Response application.For more information about installing and activating the Vulnerability Response application, see [Install Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/install-and-configure-vr.md).\n\n
\n\n\\[Omitted image \"checkbox.png\"\\] Alt text: Checkbox image.\n\n\n\nIf you don't already have the application from the ServiceNow® Store, get entitlements and download the Microsoft Defender Integration for Security Exposure Management application to your ServiceNow AI Platform® instance.\n\n
\n\n\\[Omitted image \"checkbox.png\"\\] Alt text: Checkbox image.\n\n\n\nEstimate the number of vulnerable items that you expect to import.\n\n Verify that your instance can accept the number of vulnerable items that you expect to import. An undersized instance can lead to long load times. If you don't know the size of your instance, or if you need assistance, contact ServiceNow® Technical Support.\n\n
\n\n\\[Omitted image \"checkbox.png\"\\] Alt text: Checkbox image.\n\n\n\nVerify that you have the following groups or users to manage the integrations and to remediate vulnerable items:\n\n - **admin**\n\nUses Setup Assistant to install the MS TVM integrations included with the Microsoft Defender Integration for Security Exposure Management application. If not assigned, the admin assigns the Vulnerability Admin \\(sn\\_vul.vulnerability\\_admin\\) and other roles in Setup Assistant.\n\n- **sn\\_vul.vulnerability\\_admin**\n\nCompletes the configuration of the MS TVM integrations. This role has complete access to the Vulnerability Response \\(VR\\) application and its records. This admin configures all VR applications and rules and configures third-party integrations.\n\n- **sn\\_vul\\_msft\\_tvm.configure\\_integration**\n\nConfigures the MS TVM Vulnerability integrations. This role contains the sn\\_vul\\_msft\\_tvm.read\\_integration granular role.\n\n- **sn\\_vul\\_msft\\_tvm.read\\_integration**\n\nViews \\(reads\\) records of the MS TVM Vulnerability integrations.\n\n- **Vulnerability Response group**\n\nBy default, the Vulnerability Response group is available in Setup Assistant. Users assigned to the Vulnerability Response group inherit the sn\\_vul.read\\_all and sn\\_vul.remediation\\_owner roles automatically.\n\n\n If not already created, you may prefer to create additional groups and add users with the User Administration module in your instance before you use Setup Assistant. For more information, see [Create a user group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_CreateAGroup.md).\n\n Persona and granular roles are available to help you manage what users can do and see in the Vulnerability Response application. For initial assignment of the persona roles in Setup Assistant, see [Assign the Vulnerability Response persona roles using Setup Assistant](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-assign-personas_SA.md).\n\n
\n\n\\[Omitted image \"checkbox.png\"\\] Alt text: Checkbox image.\n\n\n\nInstall the Vulnerability Response integration with NVD and run the NIST National Vulnerability Database Integration - API \\(CVE only\\).\n\n
\n\n\\[Omitted image \"checkbox.png\"\\] Alt text: Checkbox image.\n\n\n\nTo promote improved performance for your first import, you can disable certain features, rules, or jobs in your instance.\n\n - Disable vulnerability calculators if you do not use them. These calculators, plus any that you have defined, run every time a vulnerable item record is created or updated. For more information, see [Disable the default vulnerability calculator if not used](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/disable-vuln-calcs.md).\n- During the initial import of records, certain notification-related business rules can cause many notifications to be generated, which could impact the performance of the ingestion.\n\n
You are ready to [Install and configure the Microsoft TVM integrations for Security Exposure Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/mstvm-install-and-configure.md).\n\n"}}