Risk Scoring for Security Exposure Management
Calculate and roll-up risk scores across all Security Exposure Management applications
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
| 134 days of no change | ||
| 2026-04-27 | 206 | -206 |
| 26 days of no change | ||
| 2026-03-31 | 205 | +1 |
| 217 days of no change | ||
| 2025-08-25 | 66 | +139 |
| 2025-08-24 | 63 | +3 |
| 2025-08-23 | 62 | +1 |
| 2025-08-22 | 58 | +4 |
| 2025-08-21 | 46 | +12 |
About
**Note:**
**This app version is intended for Unified Security Exposure Management (USEM), a significant architectural upgrade to the Vulnerability Response applications.**
**If you are currently using Vulnerability Response and upgrading to USEM for the first time, you must use the Migration assistant for Unified Security Exposure Management to ensure a safe and successful upgrade. For full details, please refer to the [KB2556844](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2556844) and [documentation](https://www.servicenow.com/docs/bundle/zurich-security-management/page/product/security-exposure-management-workspace/concept/unified-security-exposure-management-landing-page.html) before proceeding.**
**If you do not intend to upgrade to USEM, please select a version below 30.x when installing or upgrading.**
The Risk Scoring for Security Exposure Management application delivers unified risk scoring capabilities across all Unified Security Exposure Management (USEM) applications.
Administrators can define Risk Calculators and Risk Rules in the Security Exposure Management (SEM) Workspace to consistently evaluate exposure findings based on configurable factors. Risk scoring can be configured across infrastructure, application, container, and configuration compliance findings to ensure consistent prioritisation.
With Risk Rollup Calculators, scores can be aggregated from individual findings to higher-level entities, such as Remediation Tasks, Assets, Vulnerability Items, and Configuration Tests, providing teams with a clear view of risk at every level.
Key Features
- Define **Risk Calculators** and **Risk Rules** centrally in the SEM Workspace
- Apply consistent scoring across all exposure types (infra, app, container, config)
- Configure scoring factors such as severity, exploitability, business criticality, and more
- Use **Risk Rollup Calculators** to aggregate scores from findings to:
-
- Remediation Tasks
-
- Assets
-
- Vulnerability Entries
-
- Configuration Tests