**Note:**

**This app version is intended for Unified Security Exposure Management (USEM), a significant architectural upgrade to the Vulnerability Response applications.**

**If you are currently using Vulnerability Response and upgrading to USEM for the first time, you must use the Migration assistant for Unified Security Exposure Management to ensure a safe and successful upgrade. For full details, please refer to the [KB2556844](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2556844) and [documentation](https://www.servicenow.com/docs/bundle/zurich-security-management/page/product/security-exposure-management-workspace/concept/unified-security-exposure-management-landing-page.html) before proceeding.**

**If you do not intend to upgrade to USEM, please select a version below 30.x when installing or upgrading.**

The Performance Analytics Content Pack for Vulnerability Response contains performance analytics dashboards, reports, and indicators to provide visibility into each stage of the vulnerability risk management life cycle. 

Dashboards for three distinct personas are included with the application:

1. The Vulnerability Management Dashboard
2. The Chief Information Security Officer (CISO) Dashboard
3. The Application Vulnerability Management Dashboard

The Performance Analytics Content Pack for Vulnerability Response includes the following capabilities:

- Executive personas, such as Chief Information Security Officers, can view Key Performance Metrics (KPIs) for vulnerability remediation, areas in the business that have the highest risk, and recommended actions to lower risk on the CISO dashboard.
- Visually display all of your vulnerable item activity with reports organized by tabs on the dashboard. 
- View data trends for your most important reports daily or in real time.
- Report on the total number of vulnerabilities by Common Weakness Enumeration (CWE) discovered in the environment.
- Visualize exploit complexity (low, high or medium) versus attack vector (local, adjacent, network).
- Report on vulnerabilities counts and states versus business service criticality.
- Filter reports by vulnerability business impact (critical, high, non-critical).
- Preconfigured, second level breakdowns exclusions applied to vulnerable configuration items (CIs), retired CIs, and deferred vulnerable items (VIs).
- Application Vulnerability Response provides reports on security posture, remediation trends and scoreboard for most critical application vulnerable items.